General

  • Target

    6c48e39183dda2dbdc8c92592c72feef6c6688c7b9e033ffe55581be572858e5.exe

  • Size

    107KB

  • MD5

    9804089a0579caeaa4fa44dfb63e3c71

  • SHA1

    c39be390ac2f9db6bcf7530d971beb219a976fb1

  • SHA256

    6c48e39183dda2dbdc8c92592c72feef6c6688c7b9e033ffe55581be572858e5

  • SHA512

    a6949d3c1c5e04f6792d5184d1792ec85c96d02d0c3fedf91716e14771805541164b6496b49dd8cccc1c05a1fdc93445ef40faf76849022d27cc07ab22dacc42

  • SSDEEP

    1536:Bpaiq0I2XvL/5kVvpyITHAOEH8pIZ+msXvsfJre8oJ1C7uj9m:BpaikE/5SppIZ+m2sfJrebJF

Malware Config

Extracted

Family

raccoon

Botnet

5ba094fed1175cc7d1abb03fa165c23c

C2

http://79.137.207.53/

Attributes
  • user_agent

    901785252112

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c48e39183dda2dbdc8c92592c72feef6c6688c7b9e033ffe55581be572858e5.exe
    .exe windows:6 windows x86 arch:x86

    89766042e29aed5fce63c7340618b000


    Headers

    Imports

    Sections