General

  • Target

    SеТuр_patched.exe

  • Size

    11.0MB

  • Sample

    230227-3svyxsgc3v

  • MD5

    3a049aee3f55f0baca2e2a34592928c7

  • SHA1

    cca2a8c695e4328b09689666de42d13386b0ce13

  • SHA256

    c9716a41f6865025271a42553f3240810b678f89bffaa2a5c69a0576757947ab

  • SHA512

    922cb1b7f5149cb9df1d0e9857ee6f3e167a3a8562e7343e30e6a60e2d6618676bee2e0a015509d389ccf49953a42fc3ddcf4c73a27cb872353cdc54cc322a95

  • SSDEEP

    196608:PrQt9IzyHyvJ1fJ1JtJxb0ORJmBHnI6JzxrkxzUBKdgrvW:Ef2yANJ/tJxJJmZnIszxrkxzKrvW

Malware Config

Extracted

Family

raccoon

Botnet

f26f614d4c0bc2bcd6601785661fb5cf

C2

http://83.217.11.34

http://83.217.11.35

rc4.plain

Targets

    • Target

      SеТuр_patched.exe

    • Size

      11.0MB

    • MD5

      3a049aee3f55f0baca2e2a34592928c7

    • SHA1

      cca2a8c695e4328b09689666de42d13386b0ce13

    • SHA256

      c9716a41f6865025271a42553f3240810b678f89bffaa2a5c69a0576757947ab

    • SHA512

      922cb1b7f5149cb9df1d0e9857ee6f3e167a3a8562e7343e30e6a60e2d6618676bee2e0a015509d389ccf49953a42fc3ddcf4c73a27cb872353cdc54cc322a95

    • SSDEEP

      196608:PrQt9IzyHyvJ1fJ1JtJxb0ORJmBHnI6JzxrkxzUBKdgrvW:Ef2yANJ/tJxJJmZnIszxrkxzKrvW

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks