Overview

overview

10

Static

static

10

2212-0-0x0...ry.exe

windows7-x64

2212-0-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2212-0-0x0000000000400000-0x00000000004D0000-memory.dmp

  • Size

    832KB

  • MD5

    e6c5eff7856aa47911a22ba22e050102

  • SHA1

    162c6c362f38e2d0e07de22ecbebee781d6c40bc

  • SHA256

    eec12f4db3c61700b64dfb66fb6256719b72b4e320215d5b01788557e1aa4ce7

  • SHA512

    33dc178ede91ca552bdf576d37f083297d0fa47919b186eae1bd448cc0a6cdd865c1f7008edd635d9c745b4ca824eadf507f05ee0fc21a7c12c4414329bbde4d

  • SSDEEP

    24576:CFZp0S8Vi/2cLV+r3Hz9G+ABpdzubmAKNvUlxK3h:2Zh8U/HLU3Yp7dP1UxK3h

Score
10/10
dd188c0be5001b2c8fb76d74174694cdraccoon

Malware Config

Extracted

Family

raccoon

Botnet

dd188c0be5001b2c8fb76d74174694cd

C2

http://147.45.44.25:80/

http://85.28.47.116:80/
Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2212-0-0x0000000000400000-0x00000000004D0000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections