raccoon | c3271923866c3b970f171da75cb02a490ce5f5e1fda207e9efcc3c507d82a0be

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
16-04-2024 12:12

Target

f378ade9ec18a6dba026756a132c510b_JaffaCakes118.exe
Size

518KB
MD5

f378ade9ec18a6dba026756a132c510b
SHA1

d5613e5b0d87785140dafddf75f49e4cfd22f923
SHA256

c3271923866c3b970f171da75cb02a490ce5f5e1fda207e9efcc3c507d82a0be
SHA512

ea53a1dba9ea8d6c0cbd1c5b1ef702ea0b9fdcb36be64c2f3e64fbf32bd62a13c8a91ab86345a45b0c0ac794d26a565d9427d36d9a683fc3262b38538b3347ec
SSDEEP

12288:RK80eTIPBsEdCHWg4vGcZcb73DStqYJncGMiJbG+GgYnQBR:RmeTIPzdRTqbHS4RiVG+GQ

Score

10^/10

raccoon stealer

Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
stealer raccoon

Raccoon Stealer V1 payload 3 IoCs

Processes:

resource	yara_rule
behavioral2/memory/4324-2-0x0000000002110000-0x00000000021A3000-memory.dmp	family_raccoon_v1
behavioral2/memory/4324-3-0x0000000000400000-0x0000000000505000-memory.dmp	family_raccoon_v1
behavioral2/memory/4324-7-0x0000000002110000-0x00000000021A3000-memory.dmp	family_raccoon_v1

C:\Users\Admin\AppData\Local\Temp\f378ade9ec18a6dba026756a132c510b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f378ade9ec18a6dba026756a132c510b_JaffaCakes118.exe"
1⤵
PID:4324

memory/4324-1-0x0000000000710000-0x0000000000810000-memory.dmp

Filesize
1024KB

Download
memory/4324-2-0x0000000002110000-0x00000000021A3000-memory.dmp

Filesize
588KB

Download
memory/4324-3-0x0000000000400000-0x0000000000505000-memory.dmp

Filesize
1.0MB

Download
memory/4324-6-0x0000000000710000-0x0000000000810000-memory.dmp

Filesize
1024KB

Download
memory/4324-7-0x0000000002110000-0x00000000021A3000-memory.dmp

Filesize
588KB

Download