General

  • Target

    NEAS.73b919c5b9e7468686891d7b9bfeae940db8b81c4f11692d939f7402f69ba1e4exe_JC.exe

  • Size

    102KB

  • MD5

    16efcd928f1d86f63c9067cb82ddde3c

  • SHA1

    025571ddba9ea092c5da4c9a211e9f013d71972d

  • SHA256

    73b919c5b9e7468686891d7b9bfeae940db8b81c4f11692d939f7402f69ba1e4

  • SHA512

    05d3d6705290502c4653387bb4090c7758a69203707f548b1f7db5e3093715b1d641141d9a14f0fea371a80e221be54f3fe5945db12f88346751cc0bccff0268

  • SSDEEP

    3072:bANfQKMuflyKX9FBFya6mob2lu5L6RJ//5OX:80O9FBn6pb+XRJ/w

Malware Config

Extracted

Family

raccoon

Botnet

5deca8f8467af8bb055ed4c7694228bf

C2

http://65.20.77.120:80/

http://194.87.31

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.73b919c5b9e7468686891d7b9bfeae940db8b81c4f11692d939f7402f69ba1e4exe_JC.exe
    .exe windows:6 windows x86

    0fcb7632c48018563e5af2f63681ece5


    Headers

    Imports

    Sections