General

  • Target

    LatestSetupV4-Pass-123.rar

  • Size

    19.2MB

  • Sample

    230326-bcb3bseh54

  • MD5

    6012126f8f3e616fba19a97f1619ec21

  • SHA1

    5e41df5bcfc9f72a263ceb1584b3d6eb00764aa6

  • SHA256

    08c963bb1015a874e0058f77bba69fc2ceb55ca371e6698b2fe1e3c5e8e7e728

  • SHA512

    c6cfeec00bcd9de1af616b4c88fb366d12668d535f28172987a12167ac4ee707cc86a9671b1f0f641047f5b08cdc1f9d29e75dda87dc0a33aa711b5e985f48fe

  • SSDEEP

    393216:aZx9vf8GQIepoLxH5myegHsy0IiF/SwkDQ6tsXRJ+knV+/l0uOEgjL:C7MiL55mrgHsvnFF+QxBJ+F0uOvL

Malware Config

Extracted

Family

raccoon

Botnet

1196de9cec79da84686d34883da05a1e

C2

http://94.142.138.227/

rc4.plain

Targets

    • Target

      LatestSetupV4-Pass-123.rar

    • Size

      19.2MB

    • MD5

      6012126f8f3e616fba19a97f1619ec21

    • SHA1

      5e41df5bcfc9f72a263ceb1584b3d6eb00764aa6

    • SHA256

      08c963bb1015a874e0058f77bba69fc2ceb55ca371e6698b2fe1e3c5e8e7e728

    • SHA512

      c6cfeec00bcd9de1af616b4c88fb366d12668d535f28172987a12167ac4ee707cc86a9671b1f0f641047f5b08cdc1f9d29e75dda87dc0a33aa711b5e985f48fe

    • SSDEEP

      393216:aZx9vf8GQIepoLxH5myegHsy0IiF/SwkDQ6tsXRJ+knV+/l0uOEgjL:C7MiL55mrgHsvnFF+QxBJ+F0uOvL

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks