General

  • Target

    Setup.rar

  • Size

    96.5MB

  • Sample

    230131-y7pm8scb3z

  • MD5

    6e2e1d7ba6d3c7b92571e14933cb6fab

  • SHA1

    512e6f22d5d28c3a1ffd2aaa222914487d8fa1d6

  • SHA256

    442b79dcda8809d1f40875b6f6d290d2d0d3560e011cd1d44e0127fd745e071e

  • SHA512

    feba5a4496eaebe40edef3f14e022205ba1073c4e280c6b99b25926739e9de3406f97f3fd38370ff04648ac758badbb6fb5faf4857bf1b573a0efee8834397a3

  • SSDEEP

    1572864:Dya0R9dvNsM3MbWMIvO2NoGGzB4hNmJ+v/SoHG/LEnGvaWgG0RR4G19byRHnr4K:DB0Rrv8OHNGzB+NIt/LEWaWKp19e9sK

Score
10/10

Malware Config

Targets

    • Target

      Setup/About/2xKOff.exe

    • Size

      215KB

    • MD5

      2f8021fee847c8ef790270e678fc4b98

    • SHA1

      97d6fdad3f4cf5e0ef8314b54d62f04aab47ae56

    • SHA256

      6860eff9394e30a4e50a805390b6cb20363c3c3ac1a59725774833e5dc004617

    • SHA512

      37ff87a4dd352f5e124b944aec67c65cb48e6767534387f40a0039e639645898349ba4fcf31c7a9b0bd892f1568eda12678aa302b472af736eaa97871624fdcb

    • SSDEEP

      3072:RYGRIdP4DPQMUyjoEp1i/wultvooRhfz1mgvWeBlbo4qP758L9F:RbSF4zQMRoEpE/wO82z7kZ7m

    Score
    1/10
    • Target

      Setup/About/APPServerClient.exe

    • Size

      7.8MB

    • MD5

      d0284cb4cc4389c15372bb12624263e9

    • SHA1

      bcce63e4a1cfa36e0ff9e513da159424fd9d6b54

    • SHA256

      fbc6d571f9fb7e32f44287b2878192448470a390b6da89c57b565bb9ffc2bb13

    • SHA512

      761f476394b0867f8c67f9225ad3036834d1738a5975926b37636b7eefee9e7d6eaaf4cb2a8d770d265cdeeb37d2ef8eee59346a843cf6f8ad71478b0e671e01

    • SSDEEP

      98304:eilusFQJ0IqTtuOdnHZu1euT/kUCxYZ7xZ7vsjZ7n:eWHGNg5y1eVxgsZ

    Score
    1/10
    • Target

      Setup/About/en-US/2xKOff.exe

    • Size

      215KB

    • MD5

      2f8021fee847c8ef790270e678fc4b98

    • SHA1

      97d6fdad3f4cf5e0ef8314b54d62f04aab47ae56

    • SHA256

      6860eff9394e30a4e50a805390b6cb20363c3c3ac1a59725774833e5dc004617

    • SHA512

      37ff87a4dd352f5e124b944aec67c65cb48e6767534387f40a0039e639645898349ba4fcf31c7a9b0bd892f1568eda12678aa302b472af736eaa97871624fdcb

    • SSDEEP

      3072:RYGRIdP4DPQMUyjoEp1i/wultvooRhfz1mgvWeBlbo4qP758L9F:RbSF4zQMRoEpE/wO82z7kZ7m

    Score
    1/10
    • Target

      Setup/About/en-US/APPServerClient.exe

    • Size

      7.8MB

    • MD5

      d0284cb4cc4389c15372bb12624263e9

    • SHA1

      bcce63e4a1cfa36e0ff9e513da159424fd9d6b54

    • SHA256

      fbc6d571f9fb7e32f44287b2878192448470a390b6da89c57b565bb9ffc2bb13

    • SHA512

      761f476394b0867f8c67f9225ad3036834d1738a5975926b37636b7eefee9e7d6eaaf4cb2a8d770d265cdeeb37d2ef8eee59346a843cf6f8ad71478b0e671e01

    • SSDEEP

      98304:eilusFQJ0IqTtuOdnHZu1euT/kUCxYZ7xZ7vsjZ7n:eWHGNg5y1eVxgsZ

    Score
    1/10
    • Target

      Setup/Innovation Disney.exe

    • Size

      628.7MB

    • MD5

      3750855091179b68083492ebba61e07d

    • SHA1

      5cf64bcf79a504c9e40d4f4533c4ac223202211c

    • SHA256

      3504898dd6113fe98261624ce27a2927ee1453497b855b137b6b285224e54fbf

    • SHA512

      4754e5c598d1837586173d064b92d38b30a35b9dc4c768c70d52eae9299af1a036624ccf97bdcbeb53e3ec20a03c0a42408e7faa5c92aab3ab5860051e8e904d

    • SSDEEP

      98304:xZfxvWVv+E/RODnvnra2voGrWSIwAZ84x1fLaDD:xZhWnx1feD

    Score
    10/10
    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

MITRE ATT&CK Matrix

Tasks