General

  • Target

    39ed6958b55b98d860a05b796d2f3c78.exe

  • Size

    50KB

  • MD5

    39ed6958b55b98d860a05b796d2f3c78

  • SHA1

    9b774e917e69b31052d6aeec5b6cf2720e35baa7

  • SHA256

    078df4c79d3e962bb61bf86cb8cb4c93c99ff66f5cfdb86c97e08172c86907c2

  • SHA512

    b428e3b6ab4a59da3a2d30f82fd35790669beefb3027eb6b9dd90dfa8ff04d5c01cc4d2e032c03a8f1113d04917cfcffac4c2c0b6e87ec110ca1303e59a4bac3

  • SSDEEP

    768:TVcCo1dt4cybqx7P9vm9Rg6+E7apmW8msk4:T2t4cybq56O84

Malware Config

Extracted

Family

raccoon

Botnet

6be8e80ea1fc8b931c125b897943cb68

C2

http://154.49.137.149:80

http://91.242.229.16:80

http://45.61.138.138:80

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39ed6958b55b98d860a05b796d2f3c78.exe
    .exe windows x86

    8293f3c89c8bdc2a5d082fbe7d24c76c


    Headers

    Imports

    Sections