Overview

overview

10

Static

static

10

1406293eef...f8.exe

windows7-x64

3

1406293eef...f8.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1406293eef687c73d84fff0be7d1a47bc973b79fb4b208dc4a31f311684e2bf8

  • Size

    102KB

  • MD5

    24bdb92d93d301d2e58b84f4e5161909

  • SHA1

    c0c2336f4ed7622f4fa1a4ee0b220bbbb37c73f0

  • SHA256

    1406293eef687c73d84fff0be7d1a47bc973b79fb4b208dc4a31f311684e2bf8

  • SHA512

    a4438a59f82a674dcaa7baf87350fb73837d92edc30da6f8373a182d33f182185ff7d6624d6d0aa2831c29f4e938da5484de45110791ec1ca25709bf93fd9641

  • SSDEEP

    3072:WANfQKMuflyKX9FBFya6mob2lNL6RJ//5O69:J0O9FBn6pb+4RJ/99

Score
10/10
65c47fbc812d076b01ac0a36a19adf62raccoon

Malware Config

Extracted

Family

raccoon

Botnet

65c47fbc812d076b01ac0a36a19adf62

C2

http://178.20.47.114:80/

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1406293eef687c73d84fff0be7d1a47bc973b79fb4b208dc4a31f311684e2bf8
    .exe windows:6 windows x86 arch:x86

    0fcb7632c48018563e5af2f63681ece5


    Headers

    Imports

    Sections