Overview

overview

10

Static

static

3

KMS Tools Unpack.exe

windows7-x64

10

KMS Tools Unpack.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    KMS Tools Unpack.zip

  • Size

    614KB

  • Sample

    240716-16t8fawaqe

  • MD5

    250b7d3ba76f570ac4f0a00206d6b471

  • SHA1

    ad2902d2c84786c2ebd69f8f2fe0a6023b18689c

  • SHA256

    2e2d9e43874bf3fc033c0709972ae46976b46afeb27fa413fcda8a6d3812fa50

  • SHA512

    f6d2b909ec6556dd517a2c3d5d80e23873676a888906bbc467ddb45774c442ab408a2ce199f866677333dd892721b538c4ed6b6bc3439523f6092c02a7a56118

  • SSDEEP

    3072:aF/ueipJf6dcKAA3DZz4L9GhbWCfTefzSwz/WYWKhjQga/9oJ0IeVMPnikQ3:aERpJKyL906zzFFWKhMgg9o1qMPniN3

Score
10/10
raccoondd188c0be5001b2c8fb76d74174694cdstealer

Malware Config

Extracted

Family

raccoon

Botnet

dd188c0be5001b2c8fb76d74174694cd

C2

http://147.45.44.25:80/

http://85.28.47.116:80/
Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target

      KMS Tools Unpack.exe

    • Size

      444.9MB

    • MD5

      990c2776648f18807d529dac58b72389

    • SHA1

      866a20d4a4d49a50e09c2ffee39c96f09fd7ee73

    • SHA256

      24283a726bd7eb1f2d0c9dce37f2e05160adf6f4830d6d4a9ecc985ec03df65b

    • SHA512

      daf45dac2b1a78b8bc6a79d1a06c3b8ae2d43a78a4c61d12a9c3b9b0bec60828bd7d1352b6cefb46b6b5cc126a99485a16a0e29b352e5dda9ba747cb3c0383da

    • SSDEEP

      6144:RFPK/bLjYIc9pxyN90vElTvWChzlS41R9d:RFC/f8y90svN/S2R9d

    Score
    10/10
    raccoondd188c0be5001b2c8fb76d74174694cdstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks