General

  • Target

    Software.exe

  • Size

    438.0MB

  • Sample

    230117-v87cwsgb7w

  • MD5

    49206189ebd6bb972b511e8d3b9757bb

  • SHA1

    6ac717052f21c8deeb3ee71a10bb43dc4efd1d01

  • SHA256

    92ef76c519baa1afe5e2a9b07033ef78b973c1533a77e8a935b34c79209534b8

  • SHA512

    8931852892d065728f4cf80cba4000a0ada0dd0eff232dc2f4ae76a5620e1bc7b33ea918ea32ce2989108f445d689c9f619cefa83e781cd70774a14e8f5d990c

  • SSDEEP

    24576:K2zMwwTlE32rV9AFLVGpMo5c+idrNtNNx8qR1g:3wTlOEsMK8c9dd4

Malware Config

Extracted

Family

raccoon

Botnet

cabcf15ea37a24b58186813d42a6971f

C2

http://83.217.11.16/

rc4.plain

Targets

    • Target

      Software.exe

    • Size

      438.0MB

    • MD5

      49206189ebd6bb972b511e8d3b9757bb

    • SHA1

      6ac717052f21c8deeb3ee71a10bb43dc4efd1d01

    • SHA256

      92ef76c519baa1afe5e2a9b07033ef78b973c1533a77e8a935b34c79209534b8

    • SHA512

      8931852892d065728f4cf80cba4000a0ada0dd0eff232dc2f4ae76a5620e1bc7b33ea918ea32ce2989108f445d689c9f619cefa83e781cd70774a14e8f5d990c

    • SSDEEP

      24576:K2zMwwTlE32rV9AFLVGpMo5c+idrNtNNx8qR1g:3wTlOEsMK8c9dd4

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks