General
-
Target
111.exe
-
Size
1.1MB
-
Sample
200306-4hphs99b7j
-
MD5
2811be8de6af1ee6bedcc961c9001e32
-
SHA1
535ddd8df6536df9ad9b7bb542d02c3bba3f4501
-
SHA256
b4fb873efe46af1c642cf95c769636299db7a264dae7c6ac98043d69a13a32c2
-
SHA512
929a852d2b7287480d22a04c59b18dc6533e7f838515c55d48f1232fb4289f3f4f0cf4144f400ae850f13cd4e81d320cd0e52fd880cb8b55a72ae19477fef1e3
Static task
static1
Behavioral task
behavioral1
Sample
111.exe
Resource
win7v200217
Malware Config
Extracted
raccoon
e4c70942470abe329d09148289e517bba5dc8de8
http://34.77.125.60/gate/log.php
-
url4cnc
https://drive.google.com/uc?export=download&id=1qZrnBBnNnNNwKTzUp7lRHQjySnzCdh12
Targets
-
-
Target
111.exe
-
Size
1.1MB
-
MD5
2811be8de6af1ee6bedcc961c9001e32
-
SHA1
535ddd8df6536df9ad9b7bb542d02c3bba3f4501
-
SHA256
b4fb873efe46af1c642cf95c769636299db7a264dae7c6ac98043d69a13a32c2
-
SHA512
929a852d2b7287480d22a04c59b18dc6533e7f838515c55d48f1232fb4289f3f4f0cf4144f400ae850f13cd4e81d320cd0e52fd880cb8b55a72ae19477fef1e3
-
Executes dropped EXE
-
Loads dropped DLL
-
Program crash
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext
-