General
-
Target
setupsoftapp19.0.exe
-
Size
846MB
-
Sample
230130-dh344sga7x
-
MD5
c924d548d6362d6182a801e5ac9779a2
-
SHA1
ceef050c6d3476ba14afbcb7f9fae2383409f5b6
-
SHA256
692665962615caa30b77c4ac254668ed936d4025712d9338f272d6649f700698
-
SHA512
0c669977725c8808dac6570c7a2dc8071f3cc97679fdbdd348a458f421f400a94c4725306c503277c59d62e3cb0de634d739f13b48467715762e8a284b05af5d
-
SSDEEP
98304:4bAOzokQ2Kr/ar2QhHe8J7ouoFGxqMI8jZuF++U62mcx/:qc/V8J7ou31I4t+r
Static task
static1
Behavioral task
behavioral1
Sample
setupsoftapp19.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
setupsoftapp19.0.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
raccoon
3f4a8564e5026a245d6974b020b3f6de
http://45.15.156.225/
Targets
-
-
Target
setupsoftapp19.0.exe
-
Size
846MB
-
MD5
c924d548d6362d6182a801e5ac9779a2
-
SHA1
ceef050c6d3476ba14afbcb7f9fae2383409f5b6
-
SHA256
692665962615caa30b77c4ac254668ed936d4025712d9338f272d6649f700698
-
SHA512
0c669977725c8808dac6570c7a2dc8071f3cc97679fdbdd348a458f421f400a94c4725306c503277c59d62e3cb0de634d739f13b48467715762e8a284b05af5d
-
SSDEEP
98304:4bAOzokQ2Kr/ar2QhHe8J7ouoFGxqMI8jZuF++U62mcx/:qc/V8J7ou31I4t+r
Score10/10-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-