Overview

overview

10

Static

static

10

4696-20-0x...ry.exe

windows7-x64

1

4696-20-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    4696-20-0x0000000000400000-0x000000000041C000-memory.dmp

  • Size

    112KB

  • MD5

    3cf74a4a3ac52818930fd37f6ad6cfb1

  • SHA1

    6899cab238b4778e0fe33ec149a0f426450056ce

  • SHA256

    785d0c3c4ec8dd5ed3b57382e2596164d81ee1e1c8e040c46a350e41c0fb8af2

  • SHA512

    463cf0c5d6ae407fa46e358b53154056b2bca985151354771bfc0e1741897d4b34dccf6936d67e624ed465151604da907de56f3b162212f64e7fa7125af66c52

  • SSDEEP

    3072:RANfQKMuflyKX9FBFya6mobBl5L6RJ//5OFJ3Sj:e0O9FBn6pbL8RJ/03w

Score
10/10
5e2505d8647542f05843f89ae7cd18e7raccoon

Malware Config

Extracted

Family

raccoon

Botnet

5e2505d8647542f05843f89ae7cd18e7

C2

http://65.109.2.42:80/

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4696-20-0x0000000000400000-0x000000000041C000-memory.dmp
    .exe windows:6 windows x86


    Headers

    Sections