Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-12-2024 08:36
General
-
Target
c6d57f8f74f62e1b3f8732c9f1d78c9a_JaffaCakes118.exe
-
Size
496KB
-
MD5
c6d57f8f74f62e1b3f8732c9f1d78c9a
-
SHA1
10a52e9673863403f0446fea66d5206d646cc43e
-
SHA256
fee6e072e3654446c3f79f36c8d8977ede6de679addb74e36da506a534767597
-
SHA512
b35b4d9b0712d36f58fa604352940f57edde4d8329877f3a2f6bc7c16a74e212d7a16120deed014da3e913bed218a53c6f49238cdd089d3a8c78e8c2307d0996
-
SSDEEP
12288:lFR5xMCFkfbD2/JtQ8AHgaNeh+HjbYO0pMRBuLY:lF0gJJAHgae+HjWE+Y
Score
10/10
Malware Config
Extracted
Family
raccoon
Version
1.7.3
Botnet
8a89272858125c31016bc130ad19557408b8bbe4
Attributes
-
url4cnc
https://telete.in/jjbadb0y
rc4.plain
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 5 IoCs
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c6d57f8f74f62e1b3f8732c9f1d78c9a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c6d57f8f74f62e1b3f8732c9f1d78c9a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
588KB
-
Filesize
596KB
-
Filesize
1024KB
-
Filesize
588KB
-
Filesize
40.7MB
-
Filesize
596KB