Overview

overview

10

Static

static

10

9404929845...14.exe

windows7-x64

1

9404929845...14.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9404929845586143f7710859d67216667f08d2e8e8013959b62fe5ac2cd55014.exe

  • Size

    80KB

  • MD5

    8d409ba9c06489f7f77cf6c6e07609c4

  • SHA1

    2d27b34bd9f05584b8200bfbc081c75b11ad127c

  • SHA256

    9404929845586143f7710859d67216667f08d2e8e8013959b62fe5ac2cd55014

  • SHA512

    3817654ecf6dd09b9381b25625fd62d75e3cb3cb62cdbebc0d42b22e4c22f64a86ee7c9add805c09bf102ec0a4356624a4284675d9ba0b842c7c7ecd22ba4411

  • SSDEEP

    1536:KX0PI6ORWFPekAZZ0XCkSBIPV1Fn1p06QcKUp3dFqH:9PI6GWpeVsXCLMrxbQOpNFqH

Score
10/10
bbbec09fb70501082e2a2e9916afbab0raccoon

Malware Config

Extracted

Family

raccoon

Botnet

bbbec09fb70501082e2a2e9916afbab0

C2

http://5.181.159.42:80

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9404929845586143f7710859d67216667f08d2e8e8013959b62fe5ac2cd55014.exe
    .exe windows:6 windows x86 arch:x86

    52fcc5c1bcda70fa4759c08995c5a5fb


    Headers

    Imports

    Sections