Overview

overview

10

Static

static

3

9a4ca29834...18.exe

windows7-x64

10

9a4ca29834...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-06-2024 00:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9a4ca29834afb05956baa6d43941fdd4_JaffaCakes118.exe

  • Size

    512KB

  • MD5

    9a4ca29834afb05956baa6d43941fdd4

  • SHA1

    2ffceafd456c1697b6f93271a49936f0e809b076

  • SHA256

    158d4f21670da0bdc2551260287309dce6643058dfb50c021b8e81a86e82dad2

  • SHA512

    a3c50675f0959dfdd80d004bdf5db39469e206afcbea1f1f0a94bbb170b7baa63af8577f1c64a0acfab469e345d9288bdde1d349761064bbec1c0b0e6ae59449

  • SSDEEP

    6144:cRm3AUGMaF7L7UEY41IDb/iCWYWHohrUi7N9iN9sWkgXFgx9XNP85B671xBvekLR:cIwU87fB1eb/49IhQg9ZOgx9sBc

Score
10/10
raccoon2777c69672b2f58e15c06863817c3a62cca542f2stealer

Malware Config

Extracted

Family

raccoon

Botnet

2777c69672b2f58e15c06863817c3a62cca542f2

Attributes
  • url4cnc

    https://telete.in/mvexaria

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon
  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9a4ca29834afb05956baa6d43941fdd4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9a4ca29834afb05956baa6d43941fdd4_JaffaCakes118.exe"
    1⤵
      PID:1172

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1172-1-0x0000000001CC0000-0x0000000001DC0000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1172-2-0x0000000002020000-0x00000000020AE000-memory.dmp
      Filesize

      568KB

      Download
    • memory/1172-3-0x0000000000400000-0x0000000000490000-memory.dmp
      Filesize

      576KB

      Download
    • memory/1172-4-0x0000000000400000-0x0000000001AE1000-memory.dmp
      Filesize

      22.9MB

      Download
    • memory/1172-6-0x0000000001CC0000-0x0000000001DC0000-memory.dmp
      Filesize

      1024KB

      Download
    • memory/1172-7-0x0000000002020000-0x00000000020AE000-memory.dmp
      Filesize

      568KB

      Download