Overview

overview

10

Static

static

10

194620476f...7a.exe

windows7-x64

8

194620476f...7a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    194620476ff575534a3cc834440963ff8682307a.rl

  • Size

    80KB

  • MD5

    75cc82d3cf334c82ac92d55e34459f92

  • SHA1

    194620476ff575534a3cc834440963ff8682307a

  • SHA256

    6bd19bc9223d33208733d5cc07f89bf2943210933424018afa6c2d2e2949811d

  • SHA512

    3994542ed0358a16423839873b292439a0a506aadc4d5acdd884cf76bdcecf30fb1eb093bf67d8c86928392031a317e546c853de1a6f607fe3444dd961f717e1

  • SSDEEP

    1536:KX0PI6ORWFPekAZZ0XCkSBIPV1Fn1p06QcKUp3QFqH:9PI6GWpeVsXCLMrxbQOpAFqH

Score
10/10
970bd7b21ef58eba844bcc1b35da559araccoon

Malware Config

Extracted

Family

raccoon

Botnet

970bd7b21ef58eba844bcc1b35da559a

C2

http://193.187.174.250:80/

http://176.113.115.103:80/
Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 194620476ff575534a3cc834440963ff8682307a.rl
    .exe windows:6 windows x86 arch:x86

    52fcc5c1bcda70fa4759c08995c5a5fb


    Headers

    Imports

    Sections