General

  • Target

    LatestFileV5_Pass_123.rar

  • Size

    19.2MB

  • Sample

    230326-bb7gvagh6x

  • MD5

    570fd93c147c2b3de7d3a92633746d6b

  • SHA1

    386dda47fe14ca0acf8523965f8b2755278755c1

  • SHA256

    ea3d5c93ac914685df973a012e2f677db6117c72b0f2eef0b64577d2587e48f3

  • SHA512

    920db8aff4554416ad6e7699cf67d1a4d5a0a649afcd8e3b342df63d979c495173d966a189cc09e9e84770c65608d313e23ca75de17a82f36c243f8c82d8a836

  • SSDEEP

    393216:ONux/qD/cpja6DG50tTxI8ouov3K+YFXriWqBSQHK42sEdTUiyN+DndeYmIv:9/Vp2oFay+mbiWJQq42sEuxKPv

Malware Config

Extracted

Family

raccoon

Botnet

1196de9cec79da84686d34883da05a1e

C2

http://94.142.138.227/

rc4.plain

Targets

    • Target

      LatestFileV5_Pass_123.rar

    • Size

      19.2MB

    • MD5

      570fd93c147c2b3de7d3a92633746d6b

    • SHA1

      386dda47fe14ca0acf8523965f8b2755278755c1

    • SHA256

      ea3d5c93ac914685df973a012e2f677db6117c72b0f2eef0b64577d2587e48f3

    • SHA512

      920db8aff4554416ad6e7699cf67d1a4d5a0a649afcd8e3b342df63d979c495173d966a189cc09e9e84770c65608d313e23ca75de17a82f36c243f8c82d8a836

    • SSDEEP

      393216:ONux/qD/cpja6DG50tTxI8ouov3K+YFXriWqBSQHK42sEdTUiyN+DndeYmIv:9/Vp2oFay+mbiWJQq42sEuxKPv

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks