General

  • Target

    7fd10ec76e8a107153675911c53bb528.exe

  • Size

    6.9MB

  • Sample

    220807-qhsdtsdfd5

  • MD5

    7fd10ec76e8a107153675911c53bb528

  • SHA1

    f684b8945603023195665519878bb04da5623181

  • SHA256

    bb014ee6df367a7536b5884058a370a029268ec576de51f0e29401413083a25b

  • SHA512

    ee481eeb1b5c9611f2e7ec1e4857eb877f90394b69947820a6b3257a431cdf99f9d9ea7326a89c351a554cd9f9442b9e62300b16d04948ae4af4604117e6b9f3

Malware Config

Extracted

Family

raccoon

Botnet

839b5f035af17fe32dbee0ca113be5fc

C2

http://89.185.85.53/

rc4.plain

Targets

    • Target

      7fd10ec76e8a107153675911c53bb528.exe

    • Size

      6.9MB

    • MD5

      7fd10ec76e8a107153675911c53bb528

    • SHA1

      f684b8945603023195665519878bb04da5623181

    • SHA256

      bb014ee6df367a7536b5884058a370a029268ec576de51f0e29401413083a25b

    • SHA512

      ee481eeb1b5c9611f2e7ec1e4857eb877f90394b69947820a6b3257a431cdf99f9d9ea7326a89c351a554cd9f9442b9e62300b16d04948ae4af4604117e6b9f3

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks