Overview

overview

10

Static

static

10

73b919c5b9...e4.exe

windows7-x64

1

73b919c5b9...e4.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    16efcd928f1d86f63c9067cb82ddde3c.bin

  • Size

    45KB

  • MD5

    dd13fc2bd02ac4d8108f3f7793c31656

  • SHA1

    ae924ffc0f8b70de2a11dbb8770cb79757603bfd

  • SHA256

    db82fb2564f435e9b9e39db4feac7f20ea94da0b50f8f92ca974a481d68a5984

  • SHA512

    2a10eded4fde46970f694e23367f62cf2392eba14462506675dbeaa4f6a2eac8d6835871657463d8bdff972b8b9c47037fb0ff1541bd7ba50e537389fa8fbe2a

  • SSDEEP

    768:r6jGl4/dzu49hMCTs4V/rN6MUJtg/gDf5Wd2eytRWxnoGHC3JQvI0INWQj1Vo2kP:H41u4rNsSravf5WdytRkop3JMpQj1Vo5

Score
10/10
5deca8f8467af8bb055ed4c7694228bfraccoon

Malware Config

Extracted

Family

raccoon

Botnet

5deca8f8467af8bb055ed4c7694228bf

C2

http://65.20.77.120:80/

http://194.87.31
Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Signatures

  • Raccoon Stealer payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16efcd928f1d86f63c9067cb82ddde3c.bin
    .zip

    Password: infected

  • 73b919c5b9e7468686891d7b9bfeae940db8b81c4f11692d939f7402f69ba1e4.exe
    .exe windows:6 windows x86

    Password: infected

    0fcb7632c48018563e5af2f63681ece5


    Headers

    Imports

    Sections