General

  • Target

    fc89f7167628e95935070f6a72c859da69a91655e72c4d8c8e31fbac73c2d379

  • Size

    110KB

  • MD5

    bc338e23e5411697561306eabb29bd9c

  • SHA1

    2503a1d824af32214f3102d6e0d2e52d439b91f8

  • SHA256

    fc89f7167628e95935070f6a72c859da69a91655e72c4d8c8e31fbac73c2d379

  • SHA512

    f5fa3d4f0d611225393f9ff33de6657c1c47c89e11695b44fd35c840ea6ed0545c7b1da7ce4009d8cca76cf9587cb1c4586c992cb646d4cbeb816ef72e8c9254

  • SSDEEP

    1536:/ja4qX8uFJQvccqJ4QFn8XwcWwH7Yq8BG8TcdayFtvhV732+oOl8s4PBqZ1zObEg:/jYPQRQmr8YLNL6dzjPAvZjy5g

Malware Config

Extracted

Family

raccoon

Botnet

301867536c206e3dae52e6d17c16cc9b

C2

http://213.226.100.108/

xor.plain

Signatures

Files

  • fc89f7167628e95935070f6a72c859da69a91655e72c4d8c8e31fbac73c2d379
    .exe windows x86

    97d41417e1c898a9dc85fb4d98655fda


    Headers

    Imports

    Sections