General
-
Target
9c948194834768daeef3f6d8c86d456e643d2e026adc588ff7261640b4905fbe
-
Size
66.0MB
-
Sample
230804-n33desbh3x
-
MD5
25e6268a78891921d2046a0fbfb7d0ba
-
SHA1
45c4edbbaa404bd6b00e6493a98e8e505ae6c33d
-
SHA256
9c948194834768daeef3f6d8c86d456e643d2e026adc588ff7261640b4905fbe
-
SHA512
d5e81098b9419b12ebd8b22c30604aa393ce4235c2b1575036dff5e229411fa866f8eb416f53e01d767f5ffd72ada5ae850138a5633f85cdbce8412d636a2171
-
SSDEEP
24576:s+tsx1pzI5sVbdqjTDo8VyRc/uOgv0mRUorn+FzQXXXXXXXXXXXXXXXXXXXXXXXX:s+mxvwsVIzecGOgcmRUIn+Fz
Static task
static1
Behavioral task
behavioral1
Sample
9c948194834768daeef3f6d8c86d456e643d2e026adc588ff7261640b4905fbe.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9c948194834768daeef3f6d8c86d456e643d2e026adc588ff7261640b4905fbe.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
raccoon
98a7af8efda2bdaea273f15846e6a0f5
http://94.142.138.6:80/
Targets
-
-
Target
9c948194834768daeef3f6d8c86d456e643d2e026adc588ff7261640b4905fbe
-
Size
66.0MB
-
MD5
25e6268a78891921d2046a0fbfb7d0ba
-
SHA1
45c4edbbaa404bd6b00e6493a98e8e505ae6c33d
-
SHA256
9c948194834768daeef3f6d8c86d456e643d2e026adc588ff7261640b4905fbe
-
SHA512
d5e81098b9419b12ebd8b22c30604aa393ce4235c2b1575036dff5e229411fa866f8eb416f53e01d767f5ffd72ada5ae850138a5633f85cdbce8412d636a2171
-
SSDEEP
24576:s+tsx1pzI5sVbdqjTDo8VyRc/uOgv0mRUorn+FzQXXXXXXXXXXXXXXXXXXXXXXXX:s+mxvwsVIzecGOgcmRUIn+Fz
Score10/10-
Raccoon Stealer payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-