General

  • Target

    LatestFullSetupV6-Pass-123.rar

  • Size

    20.0MB

  • Sample

    230322-s4nzmshf72

  • MD5

    9b7fc34ce0e3167c089ec9d4e20bbb7c

  • SHA1

    45bb57950a5540d34692fa72086a3af38c5359b5

  • SHA256

    3d54a6953f64c1a2eb09aafa05445a7fea14e2564d4548b3b464d3c84a3c8b4f

  • SHA512

    1f2e84a6430a9381402bc9ff12f82d20b036edb463b0303d9451fff7a9ae1ff9967d9ed52bf5d85b6e8b707b6c453ae5023867a0e37d7d0da1a028cf8dc32a37

  • SSDEEP

    393216:ZSqx4SU1xXLH4wZPXyfYRqxdXHPRDwZc80S5TC5RKMabk2MMyRFR:ZShv1PPifZ3BGcxS5OHnabk9MM/

Malware Config

Extracted

Family

raccoon

Botnet

1196de9cec79da84686d34883da05a1e

C2

http://94.142.138.227/

rc4.plain

Targets

    • Target

      LatestFullSetupV6-Pass-123.rar

    • Size

      20.0MB

    • MD5

      9b7fc34ce0e3167c089ec9d4e20bbb7c

    • SHA1

      45bb57950a5540d34692fa72086a3af38c5359b5

    • SHA256

      3d54a6953f64c1a2eb09aafa05445a7fea14e2564d4548b3b464d3c84a3c8b4f

    • SHA512

      1f2e84a6430a9381402bc9ff12f82d20b036edb463b0303d9451fff7a9ae1ff9967d9ed52bf5d85b6e8b707b6c453ae5023867a0e37d7d0da1a028cf8dc32a37

    • SSDEEP

      393216:ZSqx4SU1xXLH4wZPXyfYRqxdXHPRDwZc80S5TC5RKMabk2MMyRFR:ZShv1PPifZ3BGcxS5OHnabk9MM/

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks