Overview

overview

10

Static

static

10

2228-0-0x0...ry.exe

windows7-x64

2228-0-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2228-0-0x0000000000400000-0x0000000002336000-memory.dmp

  • Size

    31.2MB

  • MD5

    3777da79128d1ca7987b7d3bca5f20c7

  • SHA1

    4048f8557d2b1103ed13bf879a723b90046950e7

  • SHA256

    7befef2a1ac671a324c8abf56b484d2967227b538cacb7035e8449e2ed508a58

  • SHA512

    09471b00316b1432742ddd1fbda8fb6a0f9fceddf8f2f2497bf4ca2411eb79ebf8a08a166e5536bb352ff49e83c1edc6f22b06091eea4fa233fc768f457584e6

  • SSDEEP

    786432:166IWrAAEJxK9AyjJjG7zOPuCaTuUQOw+3vW:166IWA36JG7zO2CWpz

Score
10/10
5937a1bd499cd3cb596ec1995a9baf6araccoon

Malware Config

Extracted

Family

raccoon

Botnet

5937a1bd499cd3cb596ec1995a9baf6a

C2

http://78.153.130.188:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2228-0-0x0000000000400000-0x0000000002336000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections