General

  • Target
    cc2c7b2d0d68f9c6cf68eb7c31d8c514.exe
  • Size 577KB
  • Sample220310-k57t5sedf7
  • SHA256 3a85d02695c8ec33750b5754a1beb81276ab9cd6afd91f38af67444a8a4509de
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Botnet
  • 231a2bef03530ea1eb31f9ad27af7d488aca1ee8

Attributes
  • url4cnc

    http://85.159.212.113/sibiusio

    http://185.163.204.81/sibiusio

    http://194.180.191.33/sibiusio

    http://174.138.11.98/sibiusio

    http://194.180.191.44/sibiusio

    http://91.219.236.120/sibiusio

    https://t.me/sibiusio

rc4.plain
rc4.plain

Signatures

File Explorer

  • cc2c7b2d0d68f9c6cf68eb7c31d8c514.exe
    .exe 577KB

cc2c7b2d0d68f9c6cf68eb7c31d8c514.exe

  • IMPHASH 32006b4f5f2216b7baee1433a001f6f6
  • SHA256 3a85d02695c8ec33750b5754a1beb81276ab9cd6afd91f38af67444a8a4509de
  • MD5 SHA1 SHA512
Minor OS version
Major OS version
Entry point
265615
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths