General

  • Target

    6faa54734baa6510aeab6ff133514bd4a49810de298ca9a8fb3a783ab48aef5f

  • Size

    9.4MB

  • MD5

    c86689523095e471f80c8a849168313a

  • SHA1

    119d14c521ee91677a19b4d212b07eced5e9763a

  • SHA256

    6faa54734baa6510aeab6ff133514bd4a49810de298ca9a8fb3a783ab48aef5f

  • SHA512

    f9b52493ba84569d67fca4a89e85491e999c7dc60edbb284b50dfc76bfb07b18121737c7544e3f63669c724d42817072528ff5e012de4e5ea33976d86948bc92

  • SSDEEP

    196608:Xa+pGyTalKSD74X8O7qXw9aO9Vkq6e95RVQiWwy8kmzmrrePTiWJZ9oTO99EkE:q+Ay0D7mRqXlWVue9LmiKszNWWxo60

Malware Config

Extracted

Family

raccoon

Botnet

1737eb774d349e08c3b8398927baa0aa

C2

http://94.142.138.114:80/

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6faa54734baa6510aeab6ff133514bd4a49810de298ca9a8fb3a783ab48aef5f
    .exe windows:6 windows x86

    2efc5f42facb048a736c94c651f55845


    Headers

    Imports

    Sections