General

  • Target

    Actives_Setup_2023_As_PassKey.rar

  • Size

    12.4MB

  • Sample

    230405-v435nsae4y

  • MD5

    61040d324af567376629c49a5e1dddf2

  • SHA1

    c2b4e2907bab7584cb48d161fdf3ce119ece92c3

  • SHA256

    901c4fc8c8a5cd7de5536f98e97df4eb84bb328c32dab62dbb01a566d6d776c6

  • SHA512

    2374e6c2f5ea3e4a8a0196fb159b12f9552a53f2cb56edef6e50189416f7663d2ac7d405ac94efbbd514d3d5913717b3ec5830cc22811bd6154e57bff0643b7b

  • SSDEEP

    196608:8ez+JcHqUMpAtZAoggGKoAyt7N95hCbdk34gtqXVyUEvJF4uT/4//cpCAiJhr3D6:JgtSaKoHNLhn4gV1THUO1iJd3DwbUlk

Malware Config

Extracted

Family

raccoon

Botnet

13718a923845c0cdab8ce45c585b8d63

C2

http://45.15.156.143/

rc4.plain

Targets

    • Target

      satup.exe

    • Size

      1023.0MB

    • MD5

      b0adfbbb3691d0dcbcf5e61fdb4ed7cf

    • SHA1

      6eba067895f805ad558469ebfb2256b11a322caf

    • SHA256

      4041481fd62b529ee53ac26ba978362679d2230c48ba53abd7661a3c552b3e66

    • SHA512

      6e82fd34c4c94ad15c963884fbfae48d7a4a2d1072ce4315071ef2bcb25663a984a28eb0241030417214bc8980326e4244d9b53e2ea89b6e48e56f99f0bc4ee9

    • SSDEEP

      393216:oCCzYd7ZA05yeYAMIBi5exIEw7Zs4Jurfng:orzOD5YOUVs4Jcg

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

MITRE ATT&CK Matrix

Tasks