Overview

overview

10

Static

static

10

cryptolaemus

windows10-2004-x64

1

cryptolaemus

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa1b0b2f6f06f622abf2128ecafed1929682221c5ff4dd2426f16b9ae272fdf9

  • Size

    80KB

  • MD5

    7fbe056c414472cc2fcc6362bb66d212

  • SHA1

    0df63fe311154434f7d14aae2f29f47a6222b053

  • SHA256

    aa1b0b2f6f06f622abf2128ecafed1929682221c5ff4dd2426f16b9ae272fdf9

  • SHA512

    38edc08d3fd41c818ae9457e200ade74ac22aabc678adce6a99d4789b621e43b298ca8e4189be4e997f66559325d76ad941d604d4375175f174de8521e779220

  • SSDEEP

    1536:KX0PI6ORWFPekAZZ0XCkSBIPV1Fn1p06QcKUp3sFqH:9PI6GWpeVsXCLMrxbQOp8FqH

Score
10/10
afed87781b48070c555e77a16d871208raccoon

Malware Config

Extracted

Family

raccoon

Botnet

afed87781b48070c555e77a16d871208

C2

http://185.16.39.253:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa1b0b2f6f06f622abf2128ecafed1929682221c5ff4dd2426f16b9ae272fdf9
    .exe windows:6 windows x86 arch:x86

    52fcc5c1bcda70fa4759c08995c5a5fb


    Headers

    Imports

    Sections