General

  • Target

    out.exe

  • Size

    30.0MB

  • Sample

    230320-bh331aba55

  • MD5

    69218ce3ad8fb6a6f13e1f1a898bddd7

  • SHA1

    7c67d041a6987cb4f9e65edc978164bde7ec5831

  • SHA256

    4a5d75e48a94a625e05e8c01cedd4ebc9af1561dc36125e3da77d875874a1f9c

  • SHA512

    583248619a42ebd7722a39622d59ad361b6f5df4f49b02e2a4a08ba143e3160b838e2f8026cccdf1f9cfc5f46c38fb92798f31fd4f7cc4c89f495e599013afa6

  • SSDEEP

    393216:gZTPNjdghreKEpUFuTrVUkznVydZ3yRlBhBtKhRMg:aTlYbEjBUkbkbygzMg

Malware Config

Extracted

Family

raccoon

Botnet

f26f614d4c0bc2bcd6601785661fb5cf

C2

http://45.9.74.170

http://77.73.134.43

rc4.plain

Targets

    • Target

      out.exe

    • Size

      30.0MB

    • MD5

      69218ce3ad8fb6a6f13e1f1a898bddd7

    • SHA1

      7c67d041a6987cb4f9e65edc978164bde7ec5831

    • SHA256

      4a5d75e48a94a625e05e8c01cedd4ebc9af1561dc36125e3da77d875874a1f9c

    • SHA512

      583248619a42ebd7722a39622d59ad361b6f5df4f49b02e2a4a08ba143e3160b838e2f8026cccdf1f9cfc5f46c38fb92798f31fd4f7cc4c89f495e599013afa6

    • SSDEEP

      393216:gZTPNjdghreKEpUFuTrVUkznVydZ3yRlBhBtKhRMg:aTlYbEjBUkbkbygzMg

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks