Overview

overview

10

Static

static

10

1436-135-0...ry.exe

windows7-x64

1436-135-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1436-135-0x0000000000400000-0x0000000001A91000-memory.dmp

  • Size

    22.6MB

  • MD5

    ae75bab99c44bb4e3f06ca87c76e58da

  • SHA1

    4d4dded898e41b06b122a2e17bbcaeab5c68cf85

  • SHA256

    06e069ce03895cd0d29b49226def72bc22ad0760708a593e091a21f9ac6af638

  • SHA512

    b354ac3cbaa3707f631573d51bce2c04c3e0fb366f11700f42ffeed93e1c3fcc73f1632a8a4ff60a4b643ff1819b9b77299b787362bee934a7e73c4356c479db

  • SSDEEP

    393216:xMv2jh9vylEeNEjEnbB6wlz9PlP79sKqK25Pw69pKk:82jrvikEnLl5PnD2dFpK

Score
10/10
334fd5a216b2c3b3e5a3fb91bcdf6c9craccoon

Malware Config

Extracted

Family

raccoon

Botnet

334fd5a216b2c3b3e5a3fb91bcdf6c9c

C2

http://94.142.138.123

http://94.142.138.124
Attributes
  • user_agent

    901785252112

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1436-135-0x0000000000400000-0x0000000001A91000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections