Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
02-07-2024 11:42
Static task
static1
Behavioral task
behavioral1
Sample
1f3515db0d5b5eb92ca2ae7eb52eecf2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1f3515db0d5b5eb92ca2ae7eb52eecf2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1f3515db0d5b5eb92ca2ae7eb52eecf2_JaffaCakes118.exe
-
Size
548KB
-
MD5
1f3515db0d5b5eb92ca2ae7eb52eecf2
-
SHA1
3df3869fcce57e767d79b99300b17b2546335efb
-
SHA256
2d6599174555c52c6ef25cfcaca155a7288a183972a944e6e22a1de4de85cbcc
-
SHA512
706132641e5859b5b22465f3816d31e86cad8e8f8614ea2f9961ee9498421f3655f218de7383637c4245d307881581fc4831a888e1996edfd2ee3046fbd772ab
-
SSDEEP
12288:YatDjNKZkzPZ0vXMIGG6XRzxopqlGvesr0+Szxp6L:YUDjNHx2XDOB6UlOvi36L
Malware Config
Extracted
raccoon
1.8.1
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
-
url4cnc
https://t.me/agrybirdsgamerept
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
resource yara_rule behavioral1/memory/2416-2-0x0000000000320000-0x00000000003B0000-memory.dmp family_raccoon_v1 behavioral1/memory/2416-3-0x0000000000400000-0x0000000000493000-memory.dmp family_raccoon_v1 behavioral1/memory/2416-4-0x0000000000400000-0x0000000000496000-memory.dmp family_raccoon_v1 behavioral1/memory/2416-7-0x0000000000320000-0x00000000003B0000-memory.dmp family_raccoon_v1 behavioral1/memory/2416-8-0x0000000000400000-0x0000000000493000-memory.dmp family_raccoon_v1