Overview

overview

10

Static

static

1

Davinci Re...18.exe

windows7-x64

10

Davinci Re...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Davinci Resolve 18.zip

  • Size

    151.3MB

  • Sample

    230219-qv7paaff54

  • MD5

    ef9f9112a675f01b2b90afb2e0aa48a6

  • SHA1

    25510dce4a45f00e06332543af15b555dc50d1e1

  • SHA256

    ddd38149085877e10833dd060f46ad5b939b15f3bd5c44e03324da455e8955b0

  • SHA512

    a36bfa61aa318fb8e088504fe0fc8ead10cc5429dc27874277db40d46aedbd72e62211b606a443c945b4aafbe796d555e54452bb7e002f482ced3462d623c6ea

  • SSDEEP

    3145728:QpZbI0ebdm/MtqLWXwEuEa5TbHRVG8x0gr1bhGTxtstGL8NJv54UWttmR3:gbkZ1qLHEaHLZ5h0xt4mUu2

Score
10/10
raccoon00ff523bf171da1ebed0d640e0c65073stealer

Malware Config

Extracted

Family

raccoon

Botnet

00ff523bf171da1ebed0d640e0c65073

C2

http://77.73.133.23/

rc4.plain

Targets

    • Target

      Davinci Resolve 18/Davinci Resolve 18.exe

    • Size

      743.9MB

    • MD5

      2d00e9d780a63485e6e39a13c2587c97

    • SHA1

      4c6e8b91483eef6cb46203c0581c6a4cb1c73e04

    • SHA256

      4fe3477b8a21bb7aa836f21edf5f7ee0d8996f9f4365817ff87bed6262d9b8fc

    • SHA512

      d6d514f5992b2dc098f2374975ba0185034c873962eee495141fa9bb1e0b0e5f4d4ec3493c64cc023a32be0e54c501002d0ce492b220aabef9e5d6bb2ed034c1

    • SSDEEP

      24576:t1dH+Ai6F0VDCUvKckwGMIXACwVM72/MpqG4yPa:tPHrHWVmtckw8GMjq

    Score
    10/10
    raccoon00ff523bf171da1ebed0d640e0c65073stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks