General

  • Target

    Best software 2023.zip

  • Size

    96.3MB

  • Sample

    230514-px14vaec3w

  • MD5

    1803cd017d4295a7066cb156dffc2f5d

  • SHA1

    aa77c1b34e8d142d1a5c66140b1d43826337f479

  • SHA256

    efc55a3e891121b89c59b23355cebf7dccccd2439293d534b68ba13ef1e6ec09

  • SHA512

    8c206eb9bf22c97c2fe50fe21a661d310fd30c3961fa5c48fe667cc0557eefc92d3b4c80a95ab13eaabf4c6b55d63d70d1df46f1cee3e817c0ba4bc3d2fb0362

  • SSDEEP

    1572864:kmABD98Xaj1fHFVY41Jts8d9UEw68SOfZsMpTpexiCIFJ7vO3:XCq41fHHY4y8jUEwFfWsexiBF1O3

Malware Config

Extracted

Family

raccoon

Botnet

b9b4a5e42f50e8047f7ce664bfc89e14

C2

http://37.220.87.66/

http://45.9.74.99

xor.plain

Targets

    • Target

      Best software 2023/Sеtup.exe

    • Size

      814.3MB

    • MD5

      27e933506a073ad139ecf1361eee0eeb

    • SHA1

      a1fb969f599ce0747ed501078c8a339f991ca7dd

    • SHA256

      ceb9fb1274c5b38ebc62cb3eeadff9e5f4ca7d5454ee0e5689ec74e88d3d25f3

    • SHA512

      0abb36af3f6ca0d21a2c67770a46c4e294d70fe93df92ef8a6f798b105d0b7814bd488208d0c5fe938e057fac7d3804360a51184ad5149d227c8a969c6f4f041

    • SSDEEP

      393216:1qg3v73ckdpCNy7+JAIrJ1ZPMdSdPjV7uVQ+JjSw351ouudAnrgo:1qg3v73ckdpCu+JAeJjMdYqFvRuCH

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks