Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-04-2024 22:43

General

  • Target

    efaf2621d50cb09fd00088091ba4ce0a_JaffaCakes118.exe

  • Size

    593KB

  • MD5

    efaf2621d50cb09fd00088091ba4ce0a

  • SHA1

    d1b25db0eded098b9af477973c0dc1d94ab44b82

  • SHA256

    603466e9da63e3c75e4679e087e492d14867e5b0d2ab3ead903c8350c4d24d26

  • SHA512

    958afba0d292ca1103ffe051f3509a0d9b0c9f0c9a0d146129befc0b4403a1f3720a916f09e411c1f65009517f4f8d53f5c9487a0a231faeceb4d6bd0ae87ce8

  • SSDEEP

    12288:GfbgngExoQs2YaVGjrG51EYMJzGNVDoUyxFCSs:ibkQ2Y7sbMJGNVDgoS

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\efaf2621d50cb09fd00088091ba4ce0a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\efaf2621d50cb09fd00088091ba4ce0a_JaffaCakes118.exe"
    1⤵
      PID:540

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/540-1-0x0000000003490000-0x0000000003590000-memory.dmp

      Filesize

      1024KB

    • memory/540-2-0x0000000005030000-0x00000000050C3000-memory.dmp

      Filesize

      588KB

    • memory/540-3-0x0000000000400000-0x0000000003290000-memory.dmp

      Filesize

      46.6MB

    • memory/540-5-0x0000000003490000-0x0000000003590000-memory.dmp

      Filesize

      1024KB

    • memory/540-7-0x0000000005030000-0x00000000050C3000-memory.dmp

      Filesize

      588KB