General
-
Target
bc46af138f661c31bd23dfed643aec0c.bin
-
Size
560KB
-
Sample
230206-mcghladd79
-
MD5
6d9fbd0d808063fe6b460cacdb08e897
-
SHA1
efccedbd0cafe647fd9f1066b711e58bbf64aaae
-
SHA256
7089ad447bc518385d3858e983df63e7cb011e518beb4ed4117d7496a5fd28b1
-
SHA512
3d8daf4a189c8dcbf18cbf2b781f904ad187c646bbe5b3b76260ef6f294841f3ea7c2fef1004f6817f4d77d5e696b12b6d0cf4524f8ec3e3dcde87eaa7b499ae
-
SSDEEP
12288:NTnh+zTpvLzXXCS+Yxc/5qWIhMhGapwMXYdTp5/WqtVIMRREo+:dGXSSxxK5qDhMhG8wMOXWSVIMM
Static task
static1
Behavioral task
behavioral1
Sample
a02b961c3ee8f672f06eae019c1b5c1c753126b95edeb57458fea177f1f08828.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a02b961c3ee8f672f06eae019c1b5c1c753126b95edeb57458fea177f1f08828.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
raccoon
cabcf15ea37a24b58186813d42a6971f
http://83.217.11.16/
Targets
-
-
Target
a02b961c3ee8f672f06eae019c1b5c1c753126b95edeb57458fea177f1f08828.exe
-
Size
830KB
-
MD5
bc46af138f661c31bd23dfed643aec0c
-
SHA1
db363d46dfb756f97c7cfb3b0be91d1af5200a6b
-
SHA256
a02b961c3ee8f672f06eae019c1b5c1c753126b95edeb57458fea177f1f08828
-
SHA512
5c6171875162886b678daa1d4096b3c3ef0bc60fb83f7528c31eaa73c2def7adf4adb51cd858223690e9b684dce446811132bb8bfee5db78a478c77cc0b003c3
-
SSDEEP
24576:K2zMwwTlE32rV9AFLVGpMo5c+idrNtNNx8qR1g:3wTlOEsMK8c9dd4
Score10/10-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation