Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-10-2024 06:59
General
-
Target
60eed08bdc53986d9043451245b35496_JaffaCakes118.exe
-
Size
10.5MB
-
MD5
60eed08bdc53986d9043451245b35496
-
SHA1
eb95c43e9090ba5259274b679bf4de24fd629c6f
-
SHA256
8447fcdd082afb9a2432a14609d924bed51a6acd45464f60eba697a2189e9b5a
-
SHA512
ddffeb4693f738190b2514b3be96f0665eb0b147b732e026afc7247666428935351e8dbbbda7fca597efac2b060cd259e76788244cf35064c5f60f36e2514875
-
SSDEEP
98304:a1Hs3oV4DoiaQZlYgYHvA2+V5tAXeoz2yrvM0pbhm6RPCEVZkz4YbRlfcHVQ2khD:a1M484gYGVMRHmQPTZTIbcHVSD
Malware Config
Extracted
raccoon
1.7.3
bb8d3701ca5d8e031967c87b862623b34997b3d1
-
url4cnc
https://telete.in/jdiamond13
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 5 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\60eed08bdc53986d9043451245b35496_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\60eed08bdc53986d9043451245b35496_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
584KB
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
14.5MB
-
Filesize
584KB