Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09-01-2025 01:58
General
-
Target
JaffaCakes118_b80dbd2f2d2604242344a90860718718.exe
-
Size
512KB
-
MD5
b80dbd2f2d2604242344a90860718718
-
SHA1
115db4afdb61dc554d84cbbbef745f23c5534919
-
SHA256
2724e216710da4a288b8fbb671df2a7f9c446655df869601bc463a0c6c124564
-
SHA512
bba06b97e1c085f2124ac16c52c171438f1356138ab99cf86c6cb2f76a9660cdb28d3cae9d1202bae704e91f91766759aa0bfd3684e7bfd7a03484e0f084b567
-
SSDEEP
12288:fkuuSPyFkFFOpNf4hiGW1jQK2kAwGpIwZGEX8cI:ftlGki4h0QK2HVsEC
Malware Config
Extracted
raccoon
887a0ffaca448362277f2227182491216b734133
-
url4cnc
http://telegka.top/jdiamond13
http://telegin.top/jdiamond13
https://t.me/jdiamond13
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 6 IoCs
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_b80dbd2f2d2604242344a90860718718.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_b80dbd2f2d2604242344a90860718718.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
-
Filesize
568KB
-
Filesize
580KB
-
Filesize
312KB
-
Filesize
43.3MB
-
Filesize
568KB
-
Filesize
580KB
-
Filesize
43.3MB