Resubmissions
30-11-2024 13:11
241130-qfbnasyper 1006-10-2024 15:16
241006-snzffaveme 1024-08-2024 15:38
240824-s231sayemk 1024-08-2024 05:47
240824-ghd2rsxfrq 10Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
30-11-2024 13:11
General
-
Target
be01323b80fba9b067b964f32fb09b79_JaffaCakes118.exe
-
Size
541KB
-
MD5
be01323b80fba9b067b964f32fb09b79
-
SHA1
3cab41e92e0c6b2cc63e53f7e55b22db566d000a
-
SHA256
1e89e268686b120ae6e58ebfc87c5a532d227a54c35bc3b01ed1b992503f64e2
-
SHA512
73fa1a25fa7fccaa874d0f5e450870d93e1710991057e3af423b6b7089f30b046959e7f6f85a0e2c53b6d936b91141b4b33dcbaa676b9489e98c6bdd8d0df871
-
SSDEEP
12288:HoHoQ2Akjmwt0+jFHCQ3cnXJ9sMuzxp6L:HOoI2mwt0+jd2nsL36L
Malware Config
Extracted
raccoon
1.8.2
e672747afc67feb221ca60f8fc9e03adcf10f038
-
url4cnc
http://teletop.top/youyouhell0world
http://teleta.top/youyouhell0world
https://t.me/youyouhell0world
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 5 IoCs
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\be01323b80fba9b067b964f32fb09b79_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\be01323b80fba9b067b964f32fb09b79_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
568KB
-
Filesize
1024KB
-
Filesize
576KB
-
Filesize
1024KB
-
Filesize
592KB
-
Filesize
568KB
-
Filesize
576KB