General

  • Target

    satup.zip

  • Size

    14.4MB

  • Sample

    230405-rtyknahc8y

  • MD5

    471ed67ccd50d10aacaef7820db0731e

  • SHA1

    2e8cc59f6ae9df389dcf53eb39088321975bb430

  • SHA256

    961211ad16c99dacf138c2892d9a3c4427891bee86cf43fd65b01fb52f88959b

  • SHA512

    6d6346eb723275f0a5787ab1bafb15c7b70d79b0f6586eafee3ef01930af24c562dd74f476b2f7aef8c7c663bc8e2263e5ab20b01796fe92a1936f7134b82cfa

  • SSDEEP

    393216:+V01gc2JDn5FaGNoIYKimTCFmZwWGnTwYVG4M:+XlnlvYI4twYVBM

Malware Config

Extracted

Family

raccoon

Botnet

13718a923845c0cdab8ce45c585b8d63

C2

http://45.15.156.143/

rc4.plain

Targets

    • Target

      satup.exe

    • Size

      1024.0MB

    • MD5

      11f3f6e269c4bf209429c4ef873d948b

    • SHA1

      a33fa3adda9429d56cbe5ed7ff4038a9e4929218

    • SHA256

      e26e26deabfcc2cf2efa7fd3e1ee304049a1310968ca376884b64bbb7c7c0b62

    • SHA512

      378adf0cbd0453e63af8137696c2a7c7414acd1d6f87d6b548948d887317b88dcc1e0e69502255f3b7e327888602a5def4ed5844635f1034dd3f971f7f5970d0

    • SSDEEP

      393216:oCCzYd7ZA05yeYAMIBi5exIEw7Zs4Jurfng:orzOD5YOUVs4Jcg

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

MITRE ATT&CK Matrix

Tasks