Overview

overview

10

Static

static

10

4664-140-0...ry.exe

windows7-x64

4664-140-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4664-140-0x0000000000400000-0x0000000000E6C000-memory.dmp

  • Size

    10.4MB

  • MD5

    bd881b9b99518fda1be4df894bf57c02

  • SHA1

    e43e21cc1c8f4e6c39e6c85b8588a56d351291d1

  • SHA256

    7ba732814b61be85bb5c2184f76a1c81d945192b5fd995195a99c1f96266e60e

  • SHA512

    edea44fcb1e5837f0f0c8a9e428949fb5969cd220bc5e838ba25320dcad820310915905a8e2642489b464ef5153bc654ac19459fe4b7d0637e425f5a47cdc30b

  • SSDEEP

    196608:7NTFnwYr/wT8vBm/cQUSzjy/Y2gbtPpYyCTzONvocxKajSZbt:7fnwYrIIvBm1VzOQ2APpYycONvoKxjSJ

Score
10/10
b9b4a5e42f50e8047f7ce664bfc89e14raccoon

Malware Config

Extracted

Family

raccoon

Botnet

b9b4a5e42f50e8047f7ce664bfc89e14

C2

http://83.217.11.34

http://83.217.11.35
Attributes
  • user_agent

    901785252112

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4664-140-0x0000000000400000-0x0000000000E6C000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections