raccoon | 01938bf9d84182fe3387978f7a71e34f[.]exe

General

Target
01938bf9d84182fe3387978f7a71e34f.exe
Size 52KB
Sample220730-anbp9secf9
SHA256 34e7a32e97d667d008ff62c423132d64a982bbfe4ee8e438abb8781028d01e9b
MD5 01938bf9d84182fe3387978f7a71e34f
SHA1 595347e8810ee8bf8b8f2e316c3943bd459106c0
SHA512 eeb256544fe5f603e940c713e6274633b9498304f468710a642d51c1bed5d2370e46c8b5a37817b85b83842a3c4ce4c3474ab7dee9aa0ee3c458a871bfb1f1ee
SSDEEP 768:I+6wtoXuUHKxI2zN5JjR2yAKJwA2eLVv3z5nNYJNKEz1qxsuSex/AA9yoOBMM:I2toeUqu2/5AKJwA3vnNYJNpzVAALg
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Botnet

C2

rc4.plain

Raccoon Stealer payload 1 IoCs

resource	yara_rule
sample	family_raccoon

IMPHASH d24bd3ad7ee896b96a52568978d9c343
SHA256 34e7a32e97d667d008ff62c423132d64a982bbfe4ee8e438abb8781028d01e9b
MD5 01938bf9d84182fe3387978f7a71e34f
SHA1 595347e8810ee8bf8b8f2e316c3943bd459106c0
SHA512 eeb256544fe5f603e940c713e6274633b9498304f468710a642d51c1bed5d2370e46c8b5a37817b85b83842a3c4ce4c3474ab7dee9aa0ee3c458a871bfb1f1ee
SSDEEP 768:I+6wtoXuUHKxI2zN5JjR2yAKJwA2eLVv3z5nNYJNKEz1qxsuSex/AA9yoOBMM:I2toeUqu2/5AKJwA3vnNYJNpzVAALg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27626

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths