Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
22/06/2024, 22:32
General
- Target 0429795a90aa4a325ee875dccbcc1535_JaffaCakes118.exe
- Size 545KB
- Sample240622-2fynls1gkl
- SHA256 a75911d7e23552cee42fa20516ff2ac2951a45dd7e8ce1782f8007f5d3dcb93c
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.2
Botnet
-
e672747afc67feb221ca60f8fc9e03adcf10f038
Attributes
-
url4cnc
http://teletop.top/youyouhell0world
http://teleta.top/youyouhell0world
https://t.me/youyouhell0world
rc4.plain
rc4.plain
Signatures
- Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
- Raccoon Stealer V1 payload 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0429795a90aa4a325ee875dccbcc1535_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0429795a90aa4a325ee875dccbcc1535_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3932-2-0x0000000000570000-0x00000000005FE000-memory.dmp
memory/3932-1-0x00000000006B0000-0x00000000007B0000-memory.dmp
memory/3932-3-0x0000000000400000-0x0000000000490000-memory.dmp
memory/3932-4-0x0000000000400000-0x0000000000495000-memory.dmp
memory/3932-6-0x00000000006B0000-0x00000000007B0000-memory.dmp
memory/3932-7-0x0000000000570000-0x00000000005FE000-memory.dmp
memory/3932-8-0x0000000000400000-0x0000000000490000-memory.dmp