General
- Target f7d0e8e49b8ca904ce007c32fc735d9e.exe
- Size 492KB
- Sample210304-e6gl54fs5s
- SHA256 0f194879fadd2d29f30dafe3e5caeac2dd69bf725a14853ebffde46a5cf170a4
- MD5 f7d0e8e49b8ca904ce007c32fc735d9e
- SHA1 882cd94dbc5a8ed68e5caed39792def44d225635
- SHA512 f4207c27c412234668270258a3469807f63606bfadfbf3005a3fb002a5bff00de5f77fd9f7a06899040cc560909b25defc1e857cc1dd1c8ba1d9d82b083ef2d6
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
f7d0e8e49b8ca904ce007c32fc735d9e.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
f7d0e8e49b8ca904ce007c32fc735d9e.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
563129eb2a69de0d6dd4671019520d08f6eb4830
Attributes
-
url4cnc
https://telete.in/bItalianoespanol
rc4.plain
rc4.plain
Targets
-
- Target f7d0e8e49b8ca904ce007c32fc735d9e.exe
- Size 492KB
- SHA256 0f194879fadd2d29f30dafe3e5caeac2dd69bf725a14853ebffde46a5cf170a4
- MD5 f7d0e8e49b8ca904ce007c32fc735d9e
- SHA1 882cd94dbc5a8ed68e5caed39792def44d225635
- SHA512 f4207c27c412234668270258a3469807f63606bfadfbf3005a3fb002a5bff00de5f77fd9f7a06899040cc560909b25defc1e857cc1dd1c8ba1d9d82b083ef2d6
- MD5 SHA1 SHA512
Loads dropped DLL
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.