General

  • Target

    51322E3471267349A562287242DB3B45.exe

  • Size

    102KB

  • MD5

    51322e3471267349a562287242db3b45

  • SHA1

    6870bd7b87ee39339072770ee19b7ab24911dfd9

  • SHA256

    9952affcabbccc681e03047df87b05548324026730cb851fd5c89387036d4cd8

  • SHA512

    0753c4ef1f68db4d110c6803cf8ff78be06329f34b3f97b974cef34a33dde683f35448342e7a92caceaf46b13696df370203d3fdc09989f94c2d0c2277514d84

  • SSDEEP

    3072:zANfQKMuflyKX9FBFya6mob2lsL6RJ//5OU:k0O9FBn6pb+DRJ/j

Malware Config

Extracted

Family

raccoon

Botnet

706bb42023b3ce259823a09976b5d0db

C2

http://193.178.170.44:80/

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 51322E3471267349A562287242DB3B45.exe
    .exe windows:6 windows x86

    0fcb7632c48018563e5af2f63681ece5


    Headers

    Imports

    Sections