Analysis
-
max time kernel
92s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
29-12-2024 14:02
General
-
Target
JaffaCakes118_021ebf3c52ec1eb0b1ad741222f3b6795f794e26cc043beecf802a58d3ec2904.exe
-
Size
726.0MB
-
MD5
88f5792ceda4df58f4c9bec9bbdd4a04
-
SHA1
60bf9077b57289caa614025bf2824eab086b2157
-
SHA256
021ebf3c52ec1eb0b1ad741222f3b6795f794e26cc043beecf802a58d3ec2904
-
SHA512
61f065f317c7f66081223b66f6653e118e93e778a3350f0a57867938dca2dfc8c57d157d0ae02f72b93904fefa24cf541975443867f09cb4e13d4d77139781d8
-
SSDEEP
98304:SnWvdJR3w+AZorxot0eX+9mQe+Azi7vDPXHjBs0gChji/AEipDFXfY7k/I:Sn2D3K3G7YUNs+EgJg7aI
Malware Config
Extracted
raccoon
1269ed6cdc166a49ecc72e46095cface
http://79.137.197.160/
http://79.137.197.190/
-
user_agent
23591
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V2 payload 4 IoCs
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_021ebf3c52ec1eb0b1ad741222f3b6795f794e26cc043beecf802a58d3ec2904.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_021ebf3c52ec1eb0b1ad741222f3b6795f794e26cc043beecf802a58d3ec2904.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
3.3MB
-
Filesize
9.4MB
-
Filesize
3.3MB
-
Filesize
9.4MB