MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bf97fab7ccc6d55f68b6563e8c68541f4b8db1cbcb841dce67663d9e4d7938b1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 1 File information 3 Yara Comments

SHA256 hash: bf97fab7ccc6d55f68b6563e8c68541f4b8db1cbcb841dce67663d9e4d7938b1
SHA3-384 hash: b30f82a5db9cef343ff053ae7115179ec332ad6efdef41dceccf912a4fe9440cd7b9e8d748ca6ab55b8ed5af21379e67
SHA1 hash: cd7a8e51b413de2343aac98971d37e6363863de4
MD5 hash: cc5c3d6512bbc0e90d670e8a61481ca1
humanhash: uncle-bluebird-cardinal-carbon
File name:cc5c3d6512bbc0e90d670e8a61481ca1.exe
Download: download sample
Signature RaccoonStealer
File size:594'432 bytes
First seen:2020-06-30 13:35:15 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 69104843fd99359df270d11507bd145b
ssdeep 12288:Q3uao0c+wRtDAfvK8UbCOY/DFoqlakWj6Rq73dkgl:8W0Ot0zCCO6oqMUqLdT
TLSH B8C41251B382E0B2F53625316525FEB106FD7AB1862511C377D83B3EAF327E06A2C649
Reporter @abuse_ch
Tags:exe RaccoonStealer


Mail intelligence No data
# of uploads 1
# of downloads 38
Origin country US US
CAPE Sandbox Detection:n/a
ClamAV PUA.Win.Downloader.Aiis-6803892-0
CERT.PL MWDB Detection:n/a
ReversingLabs :Status:Malicious
Threat name:Win32.Trojan.Kryptik
First seen:2020-06-30 08:38:39 UTC
AV detection:26 of 31 (83.87%)
Threat level:   5/5
Spamhaus Hash Blocklist :Malicious file
Hatching Triage Score:   10/10
Malware Family:redline
Tags:ransomware stealer family:raccoon infostealer family:redline spyware discovery evasion trojan
VirusTotal:Virustotal results 42.47%

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download


Executable exe bf97fab7ccc6d55f68b6563e8c68541f4b8db1cbcb841dce67663d9e4d7938b1

(this sample)

Delivery method
Distributed via web download