General
-
Target
OriginalBuild-noAnti-cleaned_Slayed.exe
-
Size
254KB
-
Sample
230617-rz9vwaca99
-
MD5
d74faea7b03c50e52765b9267742766f
-
SHA1
003fe6b38214c3d09f63b9addf8dffefb2c8e4c8
-
SHA256
91dc9d4244f9042ddaf4a1e19c38697739acfb29a674c5f64307c666b98587e5
-
SHA512
1516e193e965a570f3df949030c484b1abaca99975b834b2b4489a66391225a98adc1e8ec367a9955b31bcb9a6cb74114585fe181a86d672e7d27967e635b1c9
-
SSDEEP
6144:AqCXwQB0GlRj+JDvdDrbE/8rA27oPEg4UkkX0cD:AJXwQIvdDdAXPEr+
Static task
static1
Behavioral task
behavioral1
Sample
OriginalBuild-noAnti-cleaned_Slayed.exe
Resource
win10-20230220-en
Malware Config
Extracted
raccoon
91c4c1e32c1544bd463348a0c42e7865
http://94.142.138.102:80/
Targets
-
-
Target
OriginalBuild-noAnti-cleaned_Slayed.exe
-
Size
254KB
-
MD5
d74faea7b03c50e52765b9267742766f
-
SHA1
003fe6b38214c3d09f63b9addf8dffefb2c8e4c8
-
SHA256
91dc9d4244f9042ddaf4a1e19c38697739acfb29a674c5f64307c666b98587e5
-
SHA512
1516e193e965a570f3df949030c484b1abaca99975b834b2b4489a66391225a98adc1e8ec367a9955b31bcb9a6cb74114585fe181a86d672e7d27967e635b1c9
-
SSDEEP
6144:AqCXwQB0GlRj+JDvdDrbE/8rA27oPEg4UkkX0cD:AJXwQIvdDdAXPEr+
Score10/10-
Raccoon Stealer payload
-
Blocklisted process makes network request
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-