General

  • Target

    test2.exe

  • Size

    393KB

  • Sample

    230513-2x1jjacb8s

  • MD5

    8feee1abc1fccf5931f4ea3d34ec91c6

  • SHA1

    402dd77cd78936c9e837f95bd730ac9c9e2e11a5

  • SHA256

    d973952bd7d8809520b745366a2c77245844a2f725f1b47347f86904d0049eb2

  • SHA512

    b90818dddfb23e345e9c387e1b4abbc6ee438cf3390acceffe746291ec4421251cb775052bf42a0c3fc449c140a0212b816b19fc8aca90b52e1973a2cf2c55dc

  • SSDEEP

    12288:5XbYqmI6n2nXJvGN8pcHmxcMYw3Rvly9UISK1:5X8qqn2ZvOH7zw3cUIS

Malware Config

Extracted

Family

raccoon

Botnet

8f650ec018d9fd14688866b3230c4641

C2

http://147.78.47.232

xor.plain

Targets

    • Target

      test2.exe

    • Size

      393KB

    • MD5

      8feee1abc1fccf5931f4ea3d34ec91c6

    • SHA1

      402dd77cd78936c9e837f95bd730ac9c9e2e11a5

    • SHA256

      d973952bd7d8809520b745366a2c77245844a2f725f1b47347f86904d0049eb2

    • SHA512

      b90818dddfb23e345e9c387e1b4abbc6ee438cf3390acceffe746291ec4421251cb775052bf42a0c3fc449c140a0212b816b19fc8aca90b52e1973a2cf2c55dc

    • SSDEEP

      12288:5XbYqmI6n2nXJvGN8pcHmxcMYw3Rvly9UISK1:5X8qqn2ZvOH7zw3cUIS

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks