Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-10-2024 17:50
General
-
Target
58c01dc043fda61849aba1f534f20c0a_JaffaCakes118.exe
-
Size
572KB
-
MD5
58c01dc043fda61849aba1f534f20c0a
-
SHA1
6986fea5d2582b4ca4e35df37edf3d3c1aa26e2f
-
SHA256
b91889da6e1a2d96ed307dfb1c5459d70ec8436ded46af0bae0425452dcc4c15
-
SHA512
633a6b4bc863269de7c94ffcb4efe01950faadef119117c038349817cef3efe5f02730ebccac94ea4078803365b60249965fc69d31d5202e5519cd84d2cc79d6
-
SSDEEP
12288:SwdzXPKqn01ays+czmQ/C1JmQoqdoDNrz3oe/Cy:hF/KqsS6P7zd6rz4e/5
Score
10/10
Malware Config
Extracted
Family
raccoon
Version
1.7.3
Botnet
cd8dc1031358b1aec55cc6bc447df1018b068607
Attributes
-
url4cnc
https://telete.in/jagressor_kz
rc4.plain
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 5 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\58c01dc043fda61849aba1f534f20c0a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\58c01dc043fda61849aba1f534f20c0a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
584KB
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
584KB
-
Filesize
5.3MB