Overview

overview

10

Static

static

3

f3e587a562...18.exe

windows7-x64

10

f3e587a562...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-04-2024 16:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f3e587a562a294820ff9f89fa22395a8_JaffaCakes118.exe

  • Size

    483KB

  • MD5

    f3e587a562a294820ff9f89fa22395a8

  • SHA1

    021d9b0d6b1b552b83a6f207092e49608c0d3f7c

  • SHA256

    6c53a9857e069a36ee9ec56da0073a158f0350ef43a6537ea821dfa4fbaa3932

  • SHA512

    89dbad26858c8c27bf971b077059168629de9472ad4ebb4e8787145833c148f865737dfd2f239347c0e7277f5039d2ae9fc9072627690b68588726ab5b59713e

  • SSDEEP

    6144:jkAeExSyh0a3HEM9ngifemA4AXwiL5qpKt1yP4LHfv/66w6HXsG8Ecu1ABYc4v:QAhdXDg+eLDxqEnLHH/p1v8EckAz4

Score
10/10
raccoonstealer

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon
  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f3e587a562a294820ff9f89fa22395a8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f3e587a562a294820ff9f89fa22395a8_JaffaCakes118.exe"
    1⤵
      PID:1656

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1656-1-0x0000000002F90000-0x0000000003090000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1656-2-0x0000000004A30000-0x0000000004AC1000-memory.dmp
      Filesize

      580KB

      Download
    • memory/1656-3-0x0000000000400000-0x0000000002CAF000-memory.dmp
      Filesize

      40.7MB

      Download
    • memory/1656-4-0x0000000000400000-0x0000000002CAF000-memory.dmp
      Filesize

      40.7MB

      Download
    • memory/1656-6-0x0000000002F90000-0x0000000003090000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1656-7-0x0000000004A30000-0x0000000004AC1000-memory.dmp
      Filesize

      580KB

      Download