Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
18-04-2024 13:21
General
-
Target
f814953dd1903ce502be57b6bed587c0_JaffaCakes118.exe
-
Size
543KB
-
MD5
f814953dd1903ce502be57b6bed587c0
-
SHA1
a14364424796ac53fc3ff9c07c484910b8c8a068
-
SHA256
a7a350da4a5263ee182de850ccd69662e6162b8e3fa42ed089a89be10cecbc05
-
SHA512
954f3213bee3606399d5be9c54dce699bbda135544da9d0c6eb88ff42fb9069eb791712b7ffe8370288e675119a3353227b3458387f99120ee2a9b15e791dba6
-
SSDEEP
12288:gstMt1/5e+puY12F9aEsxcT07mRlLV708I7xNk2R/:rC/k+J2F3X7Rn708qk2R/
Score
10/10
Malware Config
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f814953dd1903ce502be57b6bed587c0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f814953dd1903ce502be57b6bed587c0_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1768-0-0x00000000048E0000-0x0000000004930000-memory.dmpFilesize
320KB
-
memory/1768-1-0x0000000004980000-0x0000000004A12000-memory.dmpFilesize
584KB
-
memory/1768-2-0x0000000000400000-0x0000000004806000-memory.dmpFilesize
68.0MB
-
memory/1768-3-0x00000000048E0000-0x0000000004930000-memory.dmpFilesize
320KB
-
memory/1768-5-0x0000000004980000-0x0000000004A12000-memory.dmpFilesize
584KB