Overview

overview

10

Static

static

10

9952affcab...d8.exe

windows7-x64

1

9952affcab...d8.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51322e3471267349a562287242db3b45.bin

  • Size

    46KB

  • MD5

    9031e8bbb19db53ed3c6c86838724884

  • SHA1

    b8d4c75c4260474249ffa0bf73251b4f87887937

  • SHA256

    c9bab925c4e4894cf4c273d54d3a18862a76b4e6ab8bc639f1bd6226502e752d

  • SHA512

    bb334ee43321367e5d81c2ab9f5a3c092d3a1f38c3382f6518c3972ffec0547c4ed1da53ff03a8d7369f635a3f308ba1c5d9f637bcbda2e8dc9f80e09cb6dd17

  • SSDEEP

    768:Pg8fltJ7Nslh0v5OQg8llHkkJhO7nrVOb2wQhWet+hzPS8EkPXMtNge8xek:Pg8NtJZnv5OQg0xbO7nZwk+hz68f8Yey

Score
10/10
706bb42023b3ce259823a09976b5d0dbraccoon

Malware Config

Extracted

Family

raccoon

Botnet

706bb42023b3ce259823a09976b5d0db

C2

http://193.178.170.44:80/

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 51322e3471267349a562287242db3b45.bin
    .zip

    Password: infected

  • 9952affcabbccc681e03047df87b05548324026730cb851fd5c89387036d4cd8.exe
    .exe windows:6 windows x86

    Password: infected

    0fcb7632c48018563e5af2f63681ece5


    Headers

    Imports

    Sections