General
-
Target
8f226e81f2d25f9f3e2e741a0d3487128144583d79de64d903f1121fde9f42d3
-
Size
2.3MB
-
Sample
220625-cgdbmahhfj
-
MD5
6c3765191111fc238bbfedf10df00d16
-
SHA1
343e2816c224b1ad0583c352002c041dc872d329
-
SHA256
8f226e81f2d25f9f3e2e741a0d3487128144583d79de64d903f1121fde9f42d3
-
SHA512
35fcaccbcc69aeb2f2112b5824ae9e5cff8c1853e1bef9c89705b4c1c882b06d809301c2c077d6d4a42c0729945f2aa6c611b5453fa87c6de6ae50936b086bc1
Static task
static1
Behavioral task
behavioral1
Sample
8f226e81f2d25f9f3e2e741a0d3487128144583d79de64d903f1121fde9f42d3.exe
Resource
win7-20220414-en
Malware Config
Extracted
raccoon
0380ce78e535082bef76630d0bceca437f338548
-
url4cnc
https://drive.google.com/uc?export=download&id=1k0ymweaEst-OA_Um-D42KX8-DcDnmEAz
Extracted
raccoon
Targets
-
-
Target
8f226e81f2d25f9f3e2e741a0d3487128144583d79de64d903f1121fde9f42d3
-
Size
2.3MB
-
MD5
6c3765191111fc238bbfedf10df00d16
-
SHA1
343e2816c224b1ad0583c352002c041dc872d329
-
SHA256
8f226e81f2d25f9f3e2e741a0d3487128144583d79de64d903f1121fde9f42d3
-
SHA512
35fcaccbcc69aeb2f2112b5824ae9e5cff8c1853e1bef9c89705b4c1c882b06d809301c2c077d6d4a42c0729945f2aa6c611b5453fa87c6de6ae50936b086bc1
-
Raccoon Stealer Payload
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Legitimate hosting services abused for malware hosting/C2
-