General
-
Target
file
-
Size
2.1MB
-
Sample
230816-rfg1rabc68
-
MD5
be6381dc3f83d6134c2d23f6607be2ed
-
SHA1
26490592f3d71c2aaff76760e9d6ce7daeaf8a8f
-
SHA256
d97e8c4b846f1743bae248137e96b7ed4c241ef71aaa2227347e71f509f0cd78
-
SHA512
fe2714c85bd4a2793600840f3f0492e94914052f8ca2edaa7c0bd21dab56ae45a135bc76714ec200d2bd9b8aad8fdcc8ec1401e4685264c555be2c55e7f287e5
-
SSDEEP
24576:7NDh/Et25n61RW2wzG9RI7Z7v4uCJIJIJv5nQmDFzyLW0/Yzq1xxqKOI:MY4uCJIJIJR4WAd1
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
raccoon
8c02f5edc9bd60a9dac0ee41df0c95a1
http://91.103.252.217:80/
Targets
-
-
Target
file
-
Size
2.1MB
-
MD5
be6381dc3f83d6134c2d23f6607be2ed
-
SHA1
26490592f3d71c2aaff76760e9d6ce7daeaf8a8f
-
SHA256
d97e8c4b846f1743bae248137e96b7ed4c241ef71aaa2227347e71f509f0cd78
-
SHA512
fe2714c85bd4a2793600840f3f0492e94914052f8ca2edaa7c0bd21dab56ae45a135bc76714ec200d2bd9b8aad8fdcc8ec1401e4685264c555be2c55e7f287e5
-
SSDEEP
24576:7NDh/Et25n61RW2wzG9RI7Z7v4uCJIJIJv5nQmDFzyLW0/Yzq1xxqKOI:MY4uCJIJIJR4WAd1
Score10/10-
Raccoon Stealer payload
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-