Resubmissions

02-12-2024 16:47

241202-vamktsspat 10

06-02-2023 04:24

230206-e1d4dafd8x 8

General

  • Target

    payload.bin.exe

  • Size

    107KB

  • MD5

    3e2fd3c6aef426ee110e27a2a0ce1f8b

  • SHA1

    35966d13bbfbe4a85478343b35d1b4d5297fcbd1

  • SHA256

    f2cde4100fdbb5841b0f68e1c5dbba912b38478e64698c0238edb62415d1ad70

  • SHA512

    48d6792fe887e5e027c8bb66f9780bc64367440a2346a6327ca3ca9cb8f67b69129fdfd29f23edbfeb2f1d60c4bf4119a0413e19c3a48dfe2386dc9fc5733052

  • SSDEEP

    1536:Bpaiq0I2XvL/5kVvpyITHAOEH8pIZ+msXvsfJre8oJ1C7uj9m:BpaikE/5SppIZ+m2sfJrebJF

Malware Config

Extracted

Family

raccoon

Botnet

309929676cf1319632c483aa7c11dd7a

C2

http://45.15.156.50/

Attributes
  • user_agent

    901785252112

xor.plain

Signatures

  • Raccoon Stealer V2 payload 1 IoCs
  • Raccoon family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.bin.exe
    .exe windows:6 windows x86 arch:x86

    89766042e29aed5fce63c7340618b000


    Headers

    Imports

    Sections