General

  • Target

    SеT-uр.exe

  • Size

    310.0MB

  • Sample

    230327-yz2b3ahb3w

  • MD5

    8fc01fa9af99cf31ddc968c678fc8f63

  • SHA1

    746b068ae35645820634efd920e8e62a56a3dd3a

  • SHA256

    e86cc9a1b1fd4ed40be3c27b1144f8c20471024ab50691bf0078b947239473c1

  • SHA512

    5e9f396b583945364bdbeb6b3957265fae4306f04c058aa6af4e83e89ab6b087b171284ae7b307414dd0ec840205b35a9cbcc77213b52699758d77a3a317a091

  • SSDEEP

    393216:x1nw6bdySv8RhqVQDT1x5L6hIvtDojHK3Pp:E6bBvczDd6KVDo+x

Malware Config

Extracted

Family

raccoon

Botnet

f26f614d4c0bc2bcd6601785661fb5cf

C2

http://45.9.74.170

http://77.73.134.43

rc4.plain

Targets

    • Target

      SеT-uр.exe

    • Size

      310.0MB

    • MD5

      8fc01fa9af99cf31ddc968c678fc8f63

    • SHA1

      746b068ae35645820634efd920e8e62a56a3dd3a

    • SHA256

      e86cc9a1b1fd4ed40be3c27b1144f8c20471024ab50691bf0078b947239473c1

    • SHA512

      5e9f396b583945364bdbeb6b3957265fae4306f04c058aa6af4e83e89ab6b087b171284ae7b307414dd0ec840205b35a9cbcc77213b52699758d77a3a317a091

    • SSDEEP

      393216:x1nw6bdySv8RhqVQDT1x5L6hIvtDojHK3Pp:E6bBvczDd6KVDo+x

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks