General

  • Target

    98DBC861F6CC57691DB74376586791E5

  • Size

    108KB

  • MD5

    98dbc861f6cc57691db74376586791e5

  • SHA1

    171006bef430e2f5f71aeb998c82ac2036226d8e

  • SHA256

    56f0df67a1ec29ec545d08403be6146454eaf4cd4ed4737a5f3d8e2267c7e65a

  • SHA512

    9f85af8465c0855cecd481554cf12a268f8643f61333f390857248179b01bf49337bf8971baf4b64ac8fde5ed7a5026c86710d9143087d11ec4ac2ba511715a9

  • SSDEEP

    3072:6EfIr0usN5rtB+U7ITo+StFTElFDYpcO:6yttI0PtWf

Malware Config

Extracted

Family

raccoon

Botnet

f2207cc6984622b8485f5089d6ca4069

C2

http://5.78.81.39:8088/

Attributes
  • user_agent

    GeekingToTheMoon

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 98DBC861F6CC57691DB74376586791E5
    .exe windows:6 windows x86

    0fcb7632c48018563e5af2f63681ece5


    Headers

    Imports

    Sections