General

  • Target

    file.exe

  • Size

    403KB

  • Sample

    220905-pk2jvagghp

  • MD5

    b3fb2d48f4c013b2807b2acdd8b4865a

  • SHA1

    38c9af456bd77bf2dfb02242d1a6423562fcdda3

  • SHA256

    b3e2acc23f22adbd97829deb9d73b75e92b72610f05d58b4dfe9beb2ba2b5373

  • SHA512

    53f9dc2131a741ee74a0bad63f7042daa460b95d71e28cbf3a905e391f5a325165547bc185305cb53469bca70f1ed3a5179a8e1d77d0edf431dc8c8adceae7af

  • SSDEEP

    6144:aRx5JGeZj0o64mbLKU5j9mglXVtzxL6Rboaen0YSzbEJAOE/oZhhR8fctHZf42uB:aRxFAo6Hp0glTN6RcBWEhhR8+5CYSz9

Malware Config

Extracted

Family

raccoon

Botnet

77602e57d19524a205ffcb84db4a013b

C2

http://93.185.166.43/

rc4.plain

Targets

    • Target

      file.exe

    • Size

      403KB

    • MD5

      b3fb2d48f4c013b2807b2acdd8b4865a

    • SHA1

      38c9af456bd77bf2dfb02242d1a6423562fcdda3

    • SHA256

      b3e2acc23f22adbd97829deb9d73b75e92b72610f05d58b4dfe9beb2ba2b5373

    • SHA512

      53f9dc2131a741ee74a0bad63f7042daa460b95d71e28cbf3a905e391f5a325165547bc185305cb53469bca70f1ed3a5179a8e1d77d0edf431dc8c8adceae7af

    • SSDEEP

      6144:aRx5JGeZj0o64mbLKU5j9mglXVtzxL6Rboaen0YSzbEJAOE/oZhhR8fctHZf42uB:aRxFAo6Hp0glTN6RcBWEhhR8+5CYSz9

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks