Resubmissions

22-03-2024 09:42

240322-lpn8jach3w 10

09-03-2024 16:56

240309-vfnebadc8y 10

General

  • Target

    1A4B749D66F83DD6FBC8F96B90CFD4F5.exe

  • Size

    80KB

  • MD5

    1a4b749d66f83dd6fbc8f96b90cfd4f5

  • SHA1

    6b3781ad094b2833df6f534e25ed7b929828366f

  • SHA256

    90dea8f22e9858f2e345f3c499b5ef9c28c161eff15ec7c3cc75e74d0ee1fa89

  • SHA512

    53cfc33f7c331672629558abd3f1d044f1d09c2878bd752431706833b6b061a971b204f76b7e199024c5318963a236471181d070a7f4c93986d58aa8bf5c50b8

  • SSDEEP

    1536:KX0PI6ORWFPekAZZ0XCkSBIPV1Fn1p06QcKUp3nFqH:9PI6GWpeVsXCLMrxbQOp3FqH

Malware Config

Extracted

Family

raccoon

Botnet

4ddee039c3c1cb01baf0736505e3e436

C2

http://94.131.106.24:80

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1A4B749D66F83DD6FBC8F96B90CFD4F5.exe
    .exe windows:6 windows x86 arch:x86

    52fcc5c1bcda70fa4759c08995c5a5fb


    Headers

    Imports

    Sections