General

  • Target

    tmp

  • Size

    394KB

  • Sample

    230212-vcx5cafb96

  • MD5

    d74c5647d791583241baa5061e0063c9

  • SHA1

    e404c6041dca2f3b767231e38dfca8faecca10ca

  • SHA256

    bac6488f76da4691540401614bc665dfc5bec8d875cb26e72870c65ac43fe268

  • SHA512

    7a60a3dc49c64f35a7d9b8838e45cb687f023778f65feb3c89d2465306bf1bfc300022e0ac1fbc7c2f5f8c69ce6b2bf78cabf2519a0919552d14ea4734ab579e

  • SSDEEP

    12288:rkNkHyWEXeqvQYVby7+OLn2yTp/uzdGDHpc:skDqvQYV+qOL2y9/uzdGL

Malware Config

Extracted

Family

raccoon

Botnet

6c8968d2498b99bf2d581580178f5f14

C2

http://krrkrkrgsa.ink/

rc4.plain

Targets

    • Target

      tmp

    • Size

      394KB

    • MD5

      d74c5647d791583241baa5061e0063c9

    • SHA1

      e404c6041dca2f3b767231e38dfca8faecca10ca

    • SHA256

      bac6488f76da4691540401614bc665dfc5bec8d875cb26e72870c65ac43fe268

    • SHA512

      7a60a3dc49c64f35a7d9b8838e45cb687f023778f65feb3c89d2465306bf1bfc300022e0ac1fbc7c2f5f8c69ce6b2bf78cabf2519a0919552d14ea4734ab579e

    • SSDEEP

      12288:rkNkHyWEXeqvQYVby7+OLn2yTp/uzdGDHpc:skDqvQYV+qOL2y9/uzdGL

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks