General
- Target file.exe
- Size 3.6MB
- Sample221027-16sdvadhej
- SHA256 23b137ce3bf552461beac7baf3a449a620010feac5cf69a1864e40b5efa04c2d
- MD5 16071179683d1f84d63728f7a4c03167
- SHA1 179bb2c4aff7752e8082c84b585212a2ab82124f
- SHA512 1465fe553b9f105195a3de21e71c02df5e0dc23d33f8d8751afedee34becfc7351dc81b7054249c9b402673b59c528abccea9635da407b05bc05ecbd78e5958d
- SSDEEP 49152:zQYDduXQyUijUpPL6yukdjTbi6Q3/akOAA49SOt3wueGyiopbsb1GZHunfTrLh:8q2PUiApskdrUPakmO1wue3sbAOnbrLh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
9b19cf60d9bdf65b8a2495aa965456c3
C2
-
http://5.2.70.65/
rc4.plain
Targets
-
- Target file.exe
- Size 3.6MB
- SHA256 23b137ce3bf552461beac7baf3a449a620010feac5cf69a1864e40b5efa04c2d
- MD5 16071179683d1f84d63728f7a4c03167
- SHA1 179bb2c4aff7752e8082c84b585212a2ab82124f
- SHA512 1465fe553b9f105195a3de21e71c02df5e0dc23d33f8d8751afedee34becfc7351dc81b7054249c9b402673b59c528abccea9635da407b05bc05ecbd78e5958d
- SSDEEP 49152:zQYDduXQyUijUpPL6yukdjTbi6Q3/akOAA49SOt3wueGyiopbsb1GZHunfTrLh:8q2PUiApskdrUPakmO1wue3sbAOnbrLh
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext