General

  • Target

    468-64-0x0000000000400000-0x000000000041E000-memory.dmp

  • Size

    120KB

  • Sample

    230206-y5ncdsfg43

  • MD5

    bc494806ab0bb7fd4cb0a6c5354c1399

  • SHA1

    3ee11fdf0fdd276dc5234d2fce8be4f3010d0119

  • SHA256

    65f1daff150018aadc6889fb2fb5e146dde94d1c1e3d18bba5ea35ca640bb989

  • SHA512

    1775a0fe466f1cd68953fc00172e2ecd0f39852bdab3a2a6c4ebf4bb6ee57f2c3e32bff88ad8231423f29a1e0a8ef2dbb322132cd4b8997d3c401d6f5b275668

  • SSDEEP

    1536:d0jcjzCB6WeKjhKY/hINnAsmLps3K6iAGuSayJCPieRMRGpq5D:QcjzCB6WfhK4IULps3K6RbSlCPiSE75

Malware Config

Extracted

Family

raccoon

Botnet

79baa49d7baf0a462ea77cc305c9dc65

C2

http://78.47.92.58/

rc4.plain

Targets

    • Target

      468-64-0x0000000000400000-0x000000000041E000-memory.dmp

    • Size

      120KB

    • MD5

      bc494806ab0bb7fd4cb0a6c5354c1399

    • SHA1

      3ee11fdf0fdd276dc5234d2fce8be4f3010d0119

    • SHA256

      65f1daff150018aadc6889fb2fb5e146dde94d1c1e3d18bba5ea35ca640bb989

    • SHA512

      1775a0fe466f1cd68953fc00172e2ecd0f39852bdab3a2a6c4ebf4bb6ee57f2c3e32bff88ad8231423f29a1e0a8ef2dbb322132cd4b8997d3c401d6f5b275668

    • SSDEEP

      1536:d0jcjzCB6WeKjhKY/hINnAsmLps3K6iAGuSayJCPieRMRGpq5D:QcjzCB6WfhK4IULps3K6RbSlCPiSE75

    Score
    3/10

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks