Overview

overview

10

Static

static

10

2656-23-0x...ry.exe

windows7-x64

1

2656-23-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2656-23-0x0000000000400000-0x000000000085E000-memory.dmp

  • Size

    4.4MB

  • MD5

    f2e4dccadca01ba799a4ed29d36d2d65

  • SHA1

    25d8a513955cf3488ac6bc6a68405459086c792e

  • SHA256

    a29c00aa96d1bc406a1dd95ebd3a43c3730491c37e0abd27d6b62ac66550f73a

  • SHA512

    e55950be6bd1abd4b1fe9655aca9a679adb23a995d0cc557836cf34a4ecc6019ee894885360fa7e9f5a48090eb21424c985608a1a488016bdd715fa979a2a8d4

  • SSDEEP

    3072:9PI6GWpeVsXCLMrxbQ0puFqHKE2b4pFVqmkStswH9pQURRVhpHUZ5OeTC8L:9P8WwesMrJQ0pmKkmH39pQU1PHU3T

Score
10/10
02715ba03fc9d768ba977c72db990ef6raccoon

Malware Config

Extracted

Family

raccoon

Botnet

02715ba03fc9d768ba977c72db990ef6

C2

http://193.233.132.30:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2656-23-0x0000000000400000-0x000000000085E000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections