raccoon | 74c34820bf33a276614e9802dc16922a6c25e33a250931ea388e8b1480b6580f

Analysis

max time kernel
147s
max time network
148s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
20-04-2024 21:43

Target

fdb68f536679ec4995bcf92e0506c67a_JaffaCakes118.exe
Size

489KB
MD5

fdb68f536679ec4995bcf92e0506c67a
SHA1

94dda24ae4954691687ecf1cbde9d0b38dbe0bb3
SHA256

74c34820bf33a276614e9802dc16922a6c25e33a250931ea388e8b1480b6580f
SHA512

e2e7b638894181a95b3802bebf66dee89f90fbdedd9db6bfd3875918076c8f8019e6ffda629fe270a1c1ab2a1c91ac3b25aecc5a56196517712157578e80d16b
SSDEEP

6144:va3pFh03jMI6UTVAsEhLojUwEeyaWOIZfLrdoCK8ajWTmqkgx+8Npz43Ez/J5grS:g303jMIrVvEhLmUdnfOauCth5gWfkt

Score

10^/10

raccoon stealer

Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
stealer raccoon

Raccoon Stealer V1 payload 3 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1680-2-0x0000000000220000-0x00000000002AF000-memory.dmp	family_raccoon_v1
behavioral1/memory/1680-3-0x0000000000400000-0x0000000002B85000-memory.dmp	family_raccoon_v1
behavioral1/memory/1680-7-0x0000000000220000-0x00000000002AF000-memory.dmp	family_raccoon_v1

C:\Users\Admin\AppData\Local\Temp\fdb68f536679ec4995bcf92e0506c67a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fdb68f536679ec4995bcf92e0506c67a_JaffaCakes118.exe"
1⤵
PID:1680

memory/1680-1-0x0000000002CC0000-0x0000000002DC0000-memory.dmp

Filesize
1024KB

Download
memory/1680-2-0x0000000000220000-0x00000000002AF000-memory.dmp

Filesize
572KB

Download
memory/1680-3-0x0000000000400000-0x0000000002B85000-memory.dmp

Filesize
39.5MB

Download
memory/1680-5-0x0000000002CC0000-0x0000000002DC0000-memory.dmp

Filesize
1024KB

Download
memory/1680-7-0x0000000000220000-0x00000000002AF000-memory.dmp

Filesize
572KB

Download