General

  • Target

    satup_debloated.exe

  • Size

    12.7MB

  • Sample

    230410-yb9crshd4v

  • MD5

    9f788508d906d247e833826c606034a6

  • SHA1

    ddd868ccda90fb0ea52366424128af8d2d3b380a

  • SHA256

    ce44804bc5d37f89d1b6176111975da09e66e64ee9a1eecddcad0571ca32b804

  • SHA512

    b84b34950238e3c9f49c8d7c7f45cb74787c9670f47b70c48493bef77216f91b652f8316bc54737d11e9984abb9808b503d4d35cd62f31bd7c581004422c3bd6

  • SSDEEP

    393216:oCCzYd7ZA05yeYAMIBi5exIEw7Zs4Jurfn:orzOD5YOUVs4Jc

Malware Config

Extracted

Family

raccoon

Botnet

13718a923845c0cdab8ce45c585b8d63

C2

http://45.15.156.143/

xor.plain

Targets

    • Target

      satup_debloated.exe

    • Size

      12.7MB

    • MD5

      9f788508d906d247e833826c606034a6

    • SHA1

      ddd868ccda90fb0ea52366424128af8d2d3b380a

    • SHA256

      ce44804bc5d37f89d1b6176111975da09e66e64ee9a1eecddcad0571ca32b804

    • SHA512

      b84b34950238e3c9f49c8d7c7f45cb74787c9670f47b70c48493bef77216f91b652f8316bc54737d11e9984abb9808b503d4d35cd62f31bd7c581004422c3bd6

    • SSDEEP

      393216:oCCzYd7ZA05yeYAMIBi5exIEw7Zs4Jurfn:orzOD5YOUVs4Jc

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

MITRE ATT&CK Matrix

Tasks