General
- Target 4808-29-0x0000000000400000-0x0000000000416000-memory.dmp
- Size 88KB
- Sample240216-a9bmdsch8w
- SHA256 c26ae45e153633bcbe5693f3a34706bd36b93e4f108280871f721af1f3ba582b
- MD5 8bff088a93cc5e9daf3f8b7e0e5fef57
- SHA1 d3dffcf16fadf4feaa08e22669094d2418c40840
- SHA512 0f1f25705c21487fae841dd760748088527a1f8c39e0604fc8d26ceb90adfdc6e511916b187c95f0aeb11d44c0119658a87b3391eab42b232e888ca3a46c627e
- SSDEEP 1536:KX0PI6ORWFPekAZZ0XCkSBIPV1Fn1p06QcKUp3SFqH:9PI6GWpeVsXCLMrxbQOpCFqH
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
4808-29-0x0000000000400000-0x0000000000416000-memory.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4808-29-0x0000000000400000-0x0000000000416000-memory.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
3cc4b2df9390d71b3c4188a4822c2b23
C2
-
http://94.103.90.193:80/
Attributes
-
user_agent
MrBidenNeverKnow
xor.plain
Targets
-
- Target 4808-29-0x0000000000400000-0x0000000000416000-memory.dmp
- Size 88KB
- SHA256 c26ae45e153633bcbe5693f3a34706bd36b93e4f108280871f721af1f3ba582b
- MD5 8bff088a93cc5e9daf3f8b7e0e5fef57
- SHA1 d3dffcf16fadf4feaa08e22669094d2418c40840
- SHA512 0f1f25705c21487fae841dd760748088527a1f8c39e0604fc8d26ceb90adfdc6e511916b187c95f0aeb11d44c0119658a87b3391eab42b232e888ca3a46c627e
- SSDEEP 1536:KX0PI6ORWFPekAZZ0XCkSBIPV1Fn1p06QcKUp3SFqH:9PI6GWpeVsXCLMrxbQOpCFqH
- MD5 SHA1 SHA512 SSDEEP
Score3/10