Overview

overview

10

Static

static

10

9404929845...14.exe

windows7-x64

1

9404929845...14.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d409ba9c06489f7f77cf6c6e07609c4.bin

  • Size

    36KB

  • MD5

    9992a9a8750099b15eb9ec31d8395d92

  • SHA1

    157b92198e3b89a105c6cf8b3861c4bff58a20fd

  • SHA256

    fdef20dec95a477b317e289f8674b4ab03a4fa73755d8e38557f2cba47a45522

  • SHA512

    72ecee8cc3fff0c844f6d815d1012b42b702fc59b3344dd5fd0a2ab9660ac1a7da37765a2afd168e23a9cdc3253faed7ac6e8f08f8007f47ec7f6ba85c05bb0d

  • SSDEEP

    768:A2OD58h+201IMSZejapxh8DyqH6ZjVfdgkdINPdG6/XxdUsXDty2ps8lJbAa:AVCX0pS5xKDZH4J+GIJdr/BdUs51i8lj

Score
10/10
bbbec09fb70501082e2a2e9916afbab0raccoon

Malware Config

Extracted

Family

raccoon

Botnet

bbbec09fb70501082e2a2e9916afbab0

C2

http://5.181.159.42:80

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d409ba9c06489f7f77cf6c6e07609c4.bin
    .zip

    Password: infected

  • 9404929845586143f7710859d67216667f08d2e8e8013959b62fe5ac2cd55014.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    52fcc5c1bcda70fa4759c08995c5a5fb


    Headers

    Imports

    Sections