General

  • Target

    fab78c0b38c81a94c2c215d9cf4240d1da098303a70db9611152dd20ce0aa6c4

  • Size

    9.7MB

  • MD5

    877046f32d5da3e04f50b64d8a8227e9

  • SHA1

    a3ca91df823fd3a855b6756d66a98b06e48c86c1

  • SHA256

    fab78c0b38c81a94c2c215d9cf4240d1da098303a70db9611152dd20ce0aa6c4

  • SHA512

    2a35043257ba79354db682266c91856667ad772da7eb40c53d32cb8fdde36ed53d6f37918fa44994f98273614223e5a2a3ff37f53136f9a6f895f9bbe44eb985

  • SSDEEP

    196608:IrArTmBoUoYiZrwqyJeLqcXfHfxUpgjr/iUI7NCYmqVeB88we+:63JqPPHf7j5I7osOM

Malware Config

Extracted

Family

raccoon

Botnet

dfe1999bde762b0024dbf679051d95f6

C2

https://45.142.212.215

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fab78c0b38c81a94c2c215d9cf4240d1da098303a70db9611152dd20ce0aa6c4
    .exe windows:6 windows x86

    2f285ed6f05eae8b1321ad1b364e9c75


    Headers

    Imports

    Sections