General

  • Target

    2024-07-26_97834990b4e54a935612e5e8b39fca0b_avoslocker_cobalt-strike_raccoonstealer_wapomi

  • Size

    589KB

  • MD5

    97834990b4e54a935612e5e8b39fca0b

  • SHA1

    e663ada1cd97047fb9e6dc55af7950e84ab72717

  • SHA256

    cdfe4848ff55e19e93b18046cfa40283bc3b6927a6e3bb9274c2aedc554c1d65

  • SHA512

    187bb343d0581123046149fce3a6477fef64d86e480708d8a8238f5ea3ac36e0cc388f70c4f90c59e02276626bbd2cd8ffd94e5678d60295b33e079635386e48

  • SSDEEP

    12288:05ntsDk51T1v2AqWsmCsWZC6cm3mS5Osw4KT5uImXzsMji8WhoQm6f:Ontso1T1v2AVZXWZZqRqUuI

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Raccoon Stealer V1 payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-07-26_97834990b4e54a935612e5e8b39fca0b_avoslocker_cobalt-strike_raccoonstealer_wapomi
    .exe windows:6 windows x86 arch:x86

    51747c8f67e1906217336bcac3925924


    Headers

    Imports

    Sections