raccoon | 87680c17aa079a4aafdf8b3b790def84575a4cbdf29fb1a92f9dae8125c5787a

Analysis

max time kernel
58s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-01-2023 15:18

Target

93bc72073b407b80d44a3c6851d6ec87ad50f4ee2110839468f4cab1fea4f0fa.exe
Size

260KB
MD5

ad4fd710ab1f3cc38a49309d08fb4041
SHA1

4791cc5e959e6becca8cbdfd8cb34d10dc7cc8d2
SHA256

93bc72073b407b80d44a3c6851d6ec87ad50f4ee2110839468f4cab1fea4f0fa
SHA512

bcad2b652014f3bf55f6e82b4ed3cbf53edabe28c5dea2b4d10f20bd125f1b1e6bc178a4dddd58e60d2855d6c43aa56df0fc04efba9cd5ff896ea0fbbcf19a9d
SSDEEP

3072:/XWpKfn3oR5VD6mq3MwzcQlfsI2b6Ne7gMe5LRFYUEA7:vz3o5xShH2bMwUR

Score

10^/10

Family

raccoon

Botnet

d87b51d1771107cfddb7c7acd7727950

http://195.133.40.9/

rc4.plain

Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
stealer raccoon

C:\Users\Admin\AppData\Local\Temp\93bc72073b407b80d44a3c6851d6ec87ad50f4ee2110839468f4cab1fea4f0fa.exe
"C:\Users\Admin\AppData\Local\Temp\93bc72073b407b80d44a3c6851d6ec87ad50f4ee2110839468f4cab1fea4f0fa.exe"
1⤵
PID:1160

memory/1160-54-0x0000000002D2D000-0x0000000002D3E000-memory.dmp

Filesize
68KB

Download
memory/1160-55-0x0000000000230000-0x0000000000240000-memory.dmp

Filesize
64KB

Download
memory/1160-56-0x0000000075A91000-0x0000000075A93000-memory.dmp

Filesize
8KB

Download
memory/1160-57-0x0000000000400000-0x0000000002BA9000-memory.dmp

Filesize
39.7MB

Download
memory/1160-58-0x0000000002D2D000-0x0000000002D3E000-memory.dmp

Filesize
68KB

Download
memory/1160-59-0x0000000000230000-0x0000000000240000-memory.dmp

Filesize
64KB

Download
memory/1160-60-0x0000000002D2D000-0x0000000002D3E000-memory.dmp

Filesize
68KB

Download