Overview

overview

10

Static

static

1

PremiumsSa...23.rar

windows7-x64

3

0pen.me.txt

windows7-x64

1

GetFiIesSoftFully.rar

windows7-x64

3

ActiveCode.txt

windows7-x64

1

satup.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PremiumsSatupG3-Passsw0rd-2023.rar

  • Size

    12.3MB

  • Sample

    230330-reffjada27

  • MD5

    82b1042be75dfabd31e53cb65f0cde7e

  • SHA1

    e2a047c45d72b4dfc7b3cc03e6280bfb95483294

  • SHA256

    d183a256700192ba485c441674789d0241a59688015119bf65d5cb2078e2cc13

  • SHA512

    191ef2bf42ce282cbff3061a582b9e09ed4b2a6882e51057c197d123a169c928991bd19506f2eae07f762fd850cec208f77da6c35c9a8c078ddd2b5e9d5feeab

  • SSDEEP

    196608:Df5yOyIsvCQtNXkDtPzHTXpsY0gRpCdKMWEJrNrpndKZe9x7i9I5V8I2:z5yOyfCQNX6PfXpr0ygkMB1Nrq89cAn2

Score
10/10
raccoon13718a923845c0cdab8ce45c585b8d63stealer

Malware Config

Extracted

Family

raccoon

Botnet

13718a923845c0cdab8ce45c585b8d63

C2

http://45.15.156.143/

rc4.plain

Targets

    • Target

      PremiumsSatupG3-Passsw0rd-2023.rar

    • Size

      12.3MB

    • MD5

      82b1042be75dfabd31e53cb65f0cde7e

    • SHA1

      e2a047c45d72b4dfc7b3cc03e6280bfb95483294

    • SHA256

      d183a256700192ba485c441674789d0241a59688015119bf65d5cb2078e2cc13

    • SHA512

      191ef2bf42ce282cbff3061a582b9e09ed4b2a6882e51057c197d123a169c928991bd19506f2eae07f762fd850cec208f77da6c35c9a8c078ddd2b5e9d5feeab

    • SSDEEP

      196608:Df5yOyIsvCQtNXkDtPzHTXpsY0gRpCdKMWEJrNrpndKZe9x7i9I5V8I2:z5yOyfCQNX6PfXpr0ygkMB1Nrq89cAn2

    Score
    3/10
    behavioral1

    • Target

      0pen.me.txt

    • Size

      147B

    • MD5

      5a6dfcb18ec0979378b9fb4b57c1e43c

    • SHA1

      d19db4226921efc9af8002fdc53f002474eb3e11

    • SHA256

      494e0562d348b514f1ae128a26f3b23b69556e52c01bf7d10a056a352bb80bb2

    • SHA512

      b0e293d3d92e8c9eb172238bfb2cee8f1b4dee9176b40377b37d87d500daece04fdfe31cd0158cc3087c3d43d0c6c2e07cca2900b501e9b73fe87052b4d842cd

    Score
    1/10
    behavioral2

    • Target

      GetFiIesSoftFully.rar

    • Size

      12.3MB

    • MD5

      2ff2ad6d65e1722ee9c9df18e6218276

    • SHA1

      a5b5782144d1c96a019b9df0904ee49e69aaf3f5

    • SHA256

      0676f68d7c6f5ad193b24aabc39b79d92df1f6284a7a61278f4098525e7f245e

    • SHA512

      5ef5ba859cd2e18cafab2629acf2d3f9ca74e0670fd1dd161e0724575f8220ae58996e8cbe2d36c414f62cfefb62d0d99fc59b555195c274451c9cde510447d4

    • SSDEEP

      196608:Pf5yOyIsvCQtNXkDtPzHTXpsY0gRpCdKMWEJrNrpndKZe9x7i9I5V8IZ:H5yOyfCQNX6PfXpr0ygkMB1Nrq89cAnZ

    Score
    3/10
    behavioral3

    • Target

      ActiveCode.txt

    • Size

      122KB

    • MD5

      9567061462acc939155d6d7cab639ba4

    • SHA1

      33bd5a218fbe7da8d53e6e8026ad8466109a2c85

    • SHA256

      ba86e5f9bf39ddf9bbdcabfcdb8c7e28ec617781f4f6e3c820cc32ae4b27cdea

    • SHA512

      d8ccd53d2c4a80bf55378fbf2c76ef6c06ee2e2cfa30e94f2538e626fb15a24c950a6a966717721fc31f21259db77a0b64b0600df4eaabae554a3469debc2fb2

    • SSDEEP

      24:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaan:e

    Score
    1/10
    behavioral4

    • Target

      satup.exe

    • Size

      1023.0MB

    • MD5

      5ada73dc40f143101b30a8329ee5f230

    • SHA1

      05c5bd86f6edf3345f34c19fe0360f318048e0fe

    • SHA256

      5262bba7c7521cb9e694d95fc4898c4cc983ada3e21d94276c2f9a39b47670fd

    • SHA512

      719405b982aaaa74871e3259f38b5040f11a6c51667de7e90b37a3bc31aeff2fddcb57c1d5e04a6e2864f385bea0fcddea0674e2cfd14016ef51de4e0024171c

    • SSDEEP

      393216:lqoA2BAPVC6e/mtSMwrqGV0QuND7bbkcLMd:lZA2BEWVrPeblQ

    Score
    10/10
    raccoon13718a923845c0cdab8ce45c585b8d63stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon
    behavioral5

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks