General
-
Target
9d05e8ef93511f02e7f0d2704.exe
-
Size
3.5MB
-
Sample
230709-skn6asdg25
-
MD5
7aa8353d95576dfdd42d2382ffe0e626
-
SHA1
9798cd96ca573c6f54fc84611cfc4a7802212dea
-
SHA256
9d05e8ef93511f02e7f0d270402b37658817a2d233f9cd12b40b87d4a4af7a77
-
SHA512
f536592a62c5b510f05dc05b866c59557a7246052605551d364c4c1a9d9f8b94f01dbd3cf8526e4a5bded4dd81791923f14f424310d712306b523c3aca8bbc64
-
SSDEEP
24576:yqCSpM9XJSnFTGkzgB3uz60e5Lb1HCfLSovTaCqbvF+WKzQqW/pt64Y5v7QHuHOa:yqCgHny3COVb1HCfLpv
Static task
static1
Behavioral task
behavioral1
Sample
9d05e8ef93511f02e7f0d2704.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
9d05e8ef93511f02e7f0d2704.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
raccoon
fa72f4c1fbe65cee8651140fd47267ba
http://193.142.147.59:80
Targets
-
-
Target
9d05e8ef93511f02e7f0d2704.exe
-
Size
3.5MB
-
MD5
7aa8353d95576dfdd42d2382ffe0e626
-
SHA1
9798cd96ca573c6f54fc84611cfc4a7802212dea
-
SHA256
9d05e8ef93511f02e7f0d270402b37658817a2d233f9cd12b40b87d4a4af7a77
-
SHA512
f536592a62c5b510f05dc05b866c59557a7246052605551d364c4c1a9d9f8b94f01dbd3cf8526e4a5bded4dd81791923f14f424310d712306b523c3aca8bbc64
-
SSDEEP
24576:yqCSpM9XJSnFTGkzgB3uz60e5Lb1HCfLSovTaCqbvF+WKzQqW/pt64Y5v7QHuHOa:yqCgHny3COVb1HCfLpv
Score10/10-
Raccoon Stealer payload
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-