General

  • Target

    21660473a805402e4fc4bf796616ed1a_JC.exe

  • Size

    101KB

  • MD5

    21660473a805402e4fc4bf796616ed1a

  • SHA1

    f8d086021f1e1edb0705c9630f25c3d038cef19c

  • SHA256

    6bac9dbaedb4ac21b79bef837aaea4193df7c4def1faa0697fa67d1de3613330

  • SHA512

    19845d558394b1580abc4359422d04f9af97a51c3e3a982bddb30f13e83a31c8ff4fca6fd8df5e4602e97ba3872bf07a59eaf75d8ea629fd783a58be20aedeef

  • SSDEEP

    3072:dEfIr0usN5rtB+U7ITo+StATEaFDYpcOpW:dyttI0PtZe3

Malware Config

Extracted

Family

raccoon

Botnet

c07b3e8c3ea8e955ae196cb4599f6ca7

C2

http://94.103.93.160:80/

Attributes
  • user_agent

    GeekingToTheMoon

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 21660473a805402e4fc4bf796616ed1a_JC.exe
    .exe windows:6 windows x86

    0fcb7632c48018563e5af2f63681ece5


    Headers

    Imports

    Sections