General
- Target e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
- Size 13.1MB
- Sample240202-vc4bcschhn
- SHA256 e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
- MD5 c6e170d9ee35eb2a5ccc7b8eb335166b
- SHA1 45667620bc034b0204a0a987a31ad8bac53ba37a
- SHA512 7b8a94946291a8c56a54c86120598dd94d4b2a3ba9ef715068a0de42c94fed3f277a19e7cf2f2dae9c7ca3ae0924bf1a259f725459bb5932857e96071ced90e2
- SSDEEP 393216:dLIr9RFqqgiN/FNvwJU6sJKmD5rSGoCoi:xs9qqh1fwJ4XSSoi
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19.exe
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
f566f62bc780e31e03848452561e1d60
C2
-
http://94.142.138.85/
Attributes
-
user_agent
901785252112
xor.plain
Targets
-
- Target e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
- Size 13.1MB
- SHA256 e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
- MD5 c6e170d9ee35eb2a5ccc7b8eb335166b
- SHA1 45667620bc034b0204a0a987a31ad8bac53ba37a
- SHA512 7b8a94946291a8c56a54c86120598dd94d4b2a3ba9ef715068a0de42c94fed3f277a19e7cf2f2dae9c7ca3ae0924bf1a259f725459bb5932857e96071ced90e2
- SSDEEP 393216:dLIr9RFqqgiN/FNvwJU6sJKmD5rSGoCoi:xs9qqh1fwJ4XSSoi
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Raccoon Stealer V2 payload
-
Suspicious use of NtSetInformationThreadHideFromDebugger