Analysis
-
max time kernel
93s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
30-12-2024 03:05
General
-
Target
JaffaCakes118_b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79.exe
-
Size
7.6MB
-
MD5
8b2df4d709a6dfc41208b889d2a2fb20
-
SHA1
2046dad6877b3e766bec7010cdf5c9d5afee0e2b
-
SHA256
b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79
-
SHA512
ed0b2a7bb56b73ec46011787a0963378b665e29c44565930ac5e533e46735e3877e0cabc443ba24367dacb5de34fd3e2758072afbfd3fadc7e3bbd6ebe5e2497
-
SSDEEP
196608:PK8O9TbeJsABbRBsJEvrT8Wza9x5fE1XZLEcHPXgJ/:PK9ejBJij5s1pI/
Malware Config
Extracted
raccoon
7cc7e20e8fb40a79ad7a928b913d97ac
http://193.43.146.213/
http://45.142.213.24/
-
user_agent
mozzzzzzzzzzz
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.4MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
5.4MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
5.4MB