Analysis
-
max time kernel
150s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
29-11-2024 23:21
General
-
Target
b4003fbc9bd494310d37ed512d4a8312_JaffaCakes118.exe
-
Size
525KB
-
MD5
b4003fbc9bd494310d37ed512d4a8312
-
SHA1
34de7146137abed7a6d95040547ae1e697568632
-
SHA256
02d10afbff16c32ed12c722b0deb50a33f949c2e9da50daf69cd624cbabb201d
-
SHA512
885b384eaab75ce97bb7cf4ff19c796160b02be3562c2596a15c05a05a10421c53597955e14e1fcf9136ce7a4ca23bb5504c8c95ce4d6196aa1713e5cf123361
-
SSDEEP
12288:iAk2kvB10A6Qowq7PP6aW2Fc2uTvN8z2uQAD52AdX6F04:PkvBHqpW2+hDC2/m521FJ
Score
10/10
Malware Config
Extracted
Family
raccoon
Version
1.7.3
Botnet
cd8dc1031358b1aec55cc6bc447df1018b068607
Attributes
-
url4cnc
https://telete.in/jagressor_kz
rc4.plain
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 5 IoCs
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b4003fbc9bd494310d37ed512d4a8312_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b4003fbc9bd494310d37ed512d4a8312_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
584KB
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
584KB
-
Filesize
5.2MB