General

  • Target

    setupsoftapp19.0.zip

  • Size

    11.2MB

  • Sample

    230131-a79reade52

  • MD5

    e44e34b7e2f823c02ead0e6bd53dd8ad

  • SHA1

    d4d5e6a64edf89819eda0a649e4960f6586b670f

  • SHA256

    4585ff293235bd250c69a9270d4b63ea08bded3f2c6f54b55ccc331bbf4c4cd4

  • SHA512

    7147713e20e3c06bde41620cbceca1373c4281d1e605312c9bf0c593585695fb98acaf86cefc2ced19f22551a549cf1c97c64425b00c6df36e01f29792b623ec

  • SSDEEP

    196608:hC7jD4bnWQ8CIOrDc7TcsIficXPr6U/9nqdntKaJWv05VxC46fCUbeP:hC7jsbWQ8r7Awyzl/9ItKabVxf

Malware Config

Extracted

Family

raccoon

Botnet

3f4a8564e5026a245d6974b020b3f6de

C2

http://45.15.156.225/

rc4.plain

Targets

    • Target

      setupsoftapp19.0/setupsoftapp19.0.exe

    • Size

      762.9MB

    • MD5

      17aaa592f0b1bd973f5f66a4dfa728dc

    • SHA1

      31f91c8e2349ebd94ab4170f856d7ca6b65b4143

    • SHA256

      e96809c130f1387f78a72e0ad4280a13aa10223aaacb3388cf3e8971e2b14c86

    • SHA512

      565c4dff550206ffac85e9e9482b00d8859c79208889b9bd7741530d218c18576b41a5fbba08513595e3ae9bb351d66a775fa99c0cc2522af7551af2e1fe0a32

    • SSDEEP

      98304:SIAzUE2bRCunvAdP4lLBYHHm/+MJXzdG7cLwE0xYhrRx4S/HzL71hY:SIKU4uodQjAUJxG7c0EIYJ/4S/TL70

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks