General

  • Target

    Setup.exe

  • Size

    6.6MB

  • Sample

    230222-cnzs7sbc9w

  • MD5

    0859e9913321a2c77bd4c425e94cc9a2

  • SHA1

    559cb7f7e402658a979f6fdf196a900eb94f605b

  • SHA256

    1b8f84f3e94abdd467e3794e336d0beb69bc52c4cef4def0c83a01727936397b

  • SHA512

    cda14f36b595fcd7e1c0b3bde047b2334b8d531df36ab5cbe539b3d69a4f3a9f886b3c0c1a305e2831ce8f9006841ff710ad7fe3eefefa2325efa9018a8f67e3

  • SSDEEP

    196608:wy0w8mRdALuABSnzSdUbiEQt9nSXMojADLgO+xKN:yEMudzHOEQt0jsgOaKN

Malware Config

Extracted

Family

raccoon

Botnet

e8079d22e46847399691305c53f6386c

C2

http://83.217.11.34

http://83.217.11.35

rc4.plain

Targets

    • Target

      Setup.exe

    • Size

      6.6MB

    • MD5

      0859e9913321a2c77bd4c425e94cc9a2

    • SHA1

      559cb7f7e402658a979f6fdf196a900eb94f605b

    • SHA256

      1b8f84f3e94abdd467e3794e336d0beb69bc52c4cef4def0c83a01727936397b

    • SHA512

      cda14f36b595fcd7e1c0b3bde047b2334b8d531df36ab5cbe539b3d69a4f3a9f886b3c0c1a305e2831ce8f9006841ff710ad7fe3eefefa2325efa9018a8f67e3

    • SSDEEP

      196608:wy0w8mRdALuABSnzSdUbiEQt9nSXMojADLgO+xKN:yEMudzHOEQt0jsgOaKN

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks