Overview

overview

10

Static

static

10

880-24-0x0...ry.exe

windows7-x64

1

880-24-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    880-24-0x0000000000400000-0x0000000000497000-memory.dmp

  • Size

    604KB

  • MD5

    22740fa83124d216275648409cdef72c

  • SHA1

    0c4061c8c5a3096d3f8718ef13427da5e9cb8e7a

  • SHA256

    a97e3e407e68d65fa4c898c4aacac03eaa727c94ba6dc1ffebbc49a3316628e1

  • SHA512

    776452eddabe6393fa7d2d14fb7e5c7fa68e3e2f6617be55d3b70530d263b72f7d1c534fc96e59c8f693cfa32ac8c0bb4abda242fff62f4d47de3ba9c705cfa1

  • SSDEEP

    6144:I0O9FBn6pb4lRJ/lf/STC47MSzISILTc6TD:VO9FBni4zJc+4QScSIZ

Score
10/10
e4daa7b0c0cb28d4aaaa1b370f3f071braccoon

Malware Config

Extracted

Family

raccoon

Botnet

e4daa7b0c0cb28d4aaaa1b370f3f071b

C2

http://149.248.79.83:80/

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 880-24-0x0000000000400000-0x0000000000497000-memory.dmp
    .exe windows:6 windows x86


    Headers

    Sections