General

  • Target

    CI_Launcher(beta).zip

  • Size

    6.8MB

  • MD5

    2e37091ea956c1e00538dc3394fd0aa3

  • SHA1

    26d9bd269fa8d7a97c27579d0269d87004a20d9f

  • SHA256

    c0161ea7df97f6bdd3c12b89c0d2a1c45aaf2e9bef525ae236b702c05cc165c5

  • SHA512

    4d25f69ecaaaa942ab283ec971456ea0e8fbd5d6a456b69555b51e2726a46e4c87a58a96fca993017b382230616d41ab4bfcee94fd558473f4bfeaee6939330d

  • SSDEEP

    98304:Q0/sVHVdTk1CPTrMJEZp0o7B62x5X9XdMWmY1B+E7z+sGbAvfP7BeY1qs:nWTTkIPT4+GK5X1dMib7zibAvfLp

Malware Config

Extracted

Family

raccoon

Botnet

4278ff881fb479c62e116f5ce679e6fa

C2

http://45.153.240.247/

rc4.plain

Signatures

Files

  • CI_Launcher(beta).zip
    .zip

    Password: island8

  • CI_Launcher(beta)/Coral_Island_Launcher.exe
    .exe windows x86

    Password: island8

    b5af53b96a03972def1a5f287c0c1d5c


    Headers

    Imports

    Sections