Overview

overview

10

Static

static

10

324-60-0x0...ry.exe

windows7-x64

324-60-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    324-60-0x0000000000400000-0x0000000001C21000-memory.dmp

  • Size

    24.1MB

  • MD5

    e92043f54460d25ff810214e61b0332f

  • SHA1

    d981b3d670784a1e3224c5be07062a81596330a6

  • SHA256

    be1c1fa4f6ceb80a6122fcc9595420e7ecd8da936538a0f69b14ec0e17bb7712

  • SHA512

    68b238f7bbfb15d013f3e91f7dd7440308e9a66f02d6015a1b54be612ffcb4c99c8299cb5b9f99c0b06551512cc525022c19f60cdc08b98c2223d6be67faef8b

  • SSDEEP

    786432:PA/5OOGezZykBqlz6RFzSYCweyPBxo1lQq:okwzkkwlz5Yxea6C

Score
10/10
0cd608d076a2fb6b8f97e6653af6873fraccoon

Malware Config

Extracted

Family

raccoon

Botnet

0cd608d076a2fb6b8f97e6653af6873f

C2

http://83.217.11.10

http://83.217.11.11
Attributes
  • user_agent

    901785252112

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 324-60-0x0000000000400000-0x0000000001C21000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections