General
-
Target
NEAS.8ba0b135c0f49d0f5728abf76685df7106c3ac2532b604123a34a238102cdabbexe_JC.exe
-
Size
8.6MB
-
Sample
241105-1dktas1qar
-
MD5
c451a852788a27f30b7ad22a17e106a3
-
SHA1
4ef303ab3fbe365077f489409104673e71c741b4
-
SHA256
8ba0b135c0f49d0f5728abf76685df7106c3ac2532b604123a34a238102cdabb
-
SHA512
1155e9272f3b48b1d841c29286b3b235a664dab9ce692b7a7827b04d5d96adc20dff91ac97ccd06fab73d443546b87ec2fae98fa90dac0dcf39f71a06b4e5344
-
SSDEEP
196608:IZ73NmtPw6dFZNTRn4tNmtPw6dFZNTBVRO2nLBzMRr/:It30d3Zr4t0d3Z3O21MRL
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8ba0b135c0f49d0f5728abf76685df7106c3ac2532b604123a34a238102cdabbexe_JC.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
NEAS.8ba0b135c0f49d0f5728abf76685df7106c3ac2532b604123a34a238102cdabbexe_JC.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
raccoon
66abb93700da7ce4fb9f52da912f5cf3
http://45.61.138.198:80/
-
user_agent
SunShineMoonLight
Targets
-
-
Target
NEAS.8ba0b135c0f49d0f5728abf76685df7106c3ac2532b604123a34a238102cdabbexe_JC.exe
-
Size
8.6MB
-
MD5
c451a852788a27f30b7ad22a17e106a3
-
SHA1
4ef303ab3fbe365077f489409104673e71c741b4
-
SHA256
8ba0b135c0f49d0f5728abf76685df7106c3ac2532b604123a34a238102cdabb
-
SHA512
1155e9272f3b48b1d841c29286b3b235a664dab9ce692b7a7827b04d5d96adc20dff91ac97ccd06fab73d443546b87ec2fae98fa90dac0dcf39f71a06b4e5344
-
SSDEEP
196608:IZ73NmtPw6dFZNTRn4tNmtPw6dFZNTBVRO2nLBzMRr/:It30d3Zr4t0d3Z3O21MRL
-
Raccoon Stealer V2 payload
-
Raccoon family
-
Suspicious use of SetThreadContext
-