Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
16-04-2024 18:46
General
-
Target
f41922ec045ae9d97585118ed080cf0f_JaffaCakes118.exe
-
Size
477KB
-
MD5
f41922ec045ae9d97585118ed080cf0f
-
SHA1
b0c644a6bba3c9402dcd77eb9c2fec30542fc38d
-
SHA256
4b8c4a8eac028219e9061dc6b6cf7042526a56e13c8df7ddbd301b9854b7b19a
-
SHA512
89ee1251b8587f748bf0ae5ed011d231835370802532604b8ffbceba4352b9992509f53b14e034a4223f98bb0a4151a2e47ca0a0cc1d6bddc17f355747499c15
-
SSDEEP
6144:4LLJLjTP1hhkWXQBi2W6aWLTLkglQsT3kOGu/ugLSLYrziboCMk/Qnu9zrRgpS6y:4LtHxAVlNPjGumg0HUnWR1GY
Score
10/10
Malware Config
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f41922ec045ae9d97585118ed080cf0f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f41922ec045ae9d97585118ed080cf0f_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3032-2-0x0000000004A50000-0x0000000004AE3000-memory.dmpFilesize
588KB
-
memory/3032-1-0x0000000002E30000-0x0000000002F30000-memory.dmpFilesize
1024KB
-
memory/3032-3-0x0000000000400000-0x0000000002CAF000-memory.dmpFilesize
40.7MB
-
memory/3032-6-0x0000000002E30000-0x0000000002F30000-memory.dmpFilesize
1024KB
-
memory/3032-7-0x0000000004A50000-0x0000000004AE3000-memory.dmpFilesize
588KB