Resubmissions

22-03-2023 15:08

230322-sh3wnshe46 10

General

  • Target

    bgtrhipooijkgfdsdc.exe

  • Size

    10.3MB

  • Sample

    230322-sh3wnshe46

  • MD5

    09c7f4901112e39b0863288b261a626b

  • SHA1

    f9c4b5adc43a972d851039df6ca97bdd1a5ff29f

  • SHA256

    e4f89ee858218ad17e47c1670c41f8b0e73753a7d3d38677eb6afa95473b7b42

  • SHA512

    ccb2ace9e4d9adb2406f37326e14e8e5d0638202898cbeff272c97d10572e925f0c75ca7bf0f2057264bb2e03ff60f7bfa209912c836479e413f5a9247e7fb25

  • SSDEEP

    196608:WGP62w4x3II5kI/dI16VakXiEkr4GJ+D8tI2m1L7WK5AI5tD+FQic:3BSGkI2gVakXJextILtiKliFDc

Malware Config

Extracted

Family

raccoon

Botnet

1196de9cec79da84686d34883da05a1e

C2

http://94.142.138.227/

rc4.plain

Targets

    • Target

      bgtrhipooijkgfdsdc.exe

    • Size

      10.3MB

    • MD5

      09c7f4901112e39b0863288b261a626b

    • SHA1

      f9c4b5adc43a972d851039df6ca97bdd1a5ff29f

    • SHA256

      e4f89ee858218ad17e47c1670c41f8b0e73753a7d3d38677eb6afa95473b7b42

    • SHA512

      ccb2ace9e4d9adb2406f37326e14e8e5d0638202898cbeff272c97d10572e925f0c75ca7bf0f2057264bb2e03ff60f7bfa209912c836479e413f5a9247e7fb25

    • SSDEEP

      196608:WGP62w4x3II5kI/dI16VakXiEkr4GJ+D8tI2m1L7WK5AI5tD+FQic:3BSGkI2gVakXJextILtiKliFDc

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks