General

  • Target

    test.exe

  • Size

    50KB

  • MD5

    a716a9d3a4f96ab59a8009404f3e7874

  • SHA1

    cd8bb89f49dd31847404de6972f99fde9f282a85

  • SHA256

    556bca91bc7257d70c8fb87a96fb97d2487880f0db3dcafab67684b2e9aaa394

  • SHA512

    c3eb8d46e7293b1569366ec37abb8762c7c6188ffe05f2a76fa17bf4d7bd60ad4d576274cf110feca62b918ed380477ee792fd4d8de484ce5cfa71a3bc508594

  • SSDEEP

    768:TVcCo1dt4cybqx7P9vm9Rg6+E7apmW8msk:T2t4cybq56O84

Malware Config

Extracted

Family

raccoon

Botnet

da1cb8f0cd8c04f99d850f155e0c7eef

C2

http://91.103.252.140:80x

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows x86

    8293f3c89c8bdc2a5d082fbe7d24c76c


    Headers

    Imports

    Sections