General

  • Target

    file.exe

  • Size

    3.6MB

  • Sample

    221027-16sdvadhej

  • MD5

    16071179683d1f84d63728f7a4c03167

  • SHA1

    179bb2c4aff7752e8082c84b585212a2ab82124f

  • SHA256

    23b137ce3bf552461beac7baf3a449a620010feac5cf69a1864e40b5efa04c2d

  • SHA512

    1465fe553b9f105195a3de21e71c02df5e0dc23d33f8d8751afedee34becfc7351dc81b7054249c9b402673b59c528abccea9635da407b05bc05ecbd78e5958d

  • SSDEEP

    49152:zQYDduXQyUijUpPL6yukdjTbi6Q3/akOAA49SOt3wueGyiopbsb1GZHunfTrLh:8q2PUiApskdrUPakmO1wue3sbAOnbrLh

Malware Config

Extracted

Family

raccoon

Botnet

9b19cf60d9bdf65b8a2495aa965456c3

C2

http://5.2.70.65/

rc4.plain

Targets

    • Target

      file.exe

    • Size

      3.6MB

    • MD5

      16071179683d1f84d63728f7a4c03167

    • SHA1

      179bb2c4aff7752e8082c84b585212a2ab82124f

    • SHA256

      23b137ce3bf552461beac7baf3a449a620010feac5cf69a1864e40b5efa04c2d

    • SHA512

      1465fe553b9f105195a3de21e71c02df5e0dc23d33f8d8751afedee34becfc7351dc81b7054249c9b402673b59c528abccea9635da407b05bc05ecbd78e5958d

    • SSDEEP

      49152:zQYDduXQyUijUpPL6yukdjTbi6Q3/akOAA49SOt3wueGyiopbsb1GZHunfTrLh:8q2PUiApskdrUPakmO1wue3sbAOnbrLh

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks