General

  • Target

    Setup.exe

  • Size

    6.7MB

  • Sample

    230222-crvcwshe29

  • MD5

    570d50a75b897408c7e6ac71ce58f05c

  • SHA1

    d9ef332a3ed7ec94bee34b79d86d858fe9610504

  • SHA256

    d8ee018ff5de47956d2fb82a4f4c9e05a8b6a1af65e99bdd325e5e388c5bf4da

  • SHA512

    6a37493995cdda39f90f80e8684be4694a03dfe533d632a0bc37acae05a641841f3350e1562719a90762febb11e8ac18b8e14e18c431a73ecf4f5e7ca41541cf

  • SSDEEP

    98304:s2N71XVjYSIX9SquY8YSGA2rLHXYQhLZGVGzp9l1Y950EadPnUUPCmQU4y:VpXKSU9Huy3YQaVe/y0dUUPCml4y

Malware Config

Extracted

Family

raccoon

Botnet

20006ec55ea2d79e735051ae184a687c

C2

http://83.217.11.34

http://83.217.11.35

rc4.plain

Targets

    • Target

      Setup.exe

    • Size

      6.7MB

    • MD5

      570d50a75b897408c7e6ac71ce58f05c

    • SHA1

      d9ef332a3ed7ec94bee34b79d86d858fe9610504

    • SHA256

      d8ee018ff5de47956d2fb82a4f4c9e05a8b6a1af65e99bdd325e5e388c5bf4da

    • SHA512

      6a37493995cdda39f90f80e8684be4694a03dfe533d632a0bc37acae05a641841f3350e1562719a90762febb11e8ac18b8e14e18c431a73ecf4f5e7ca41541cf

    • SSDEEP

      98304:s2N71XVjYSIX9SquY8YSGA2rLHXYQhLZGVGzp9l1Y950EadPnUUPCmQU4y:VpXKSU9Huy3YQaVe/y0dUUPCml4y

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks