General
- Target 498464e09964f85678853264f5c265b5.exe
- Size 578KB
- Sample210313-9rtctnetw6
- SHA256 6285cfd7bfe0a8dfee88ba7f54b658c2f9b677e61d010396355c5ef5781e047d
- MD5 498464e09964f85678853264f5c265b5
- SHA1 b1afa813527d6ac434e0f59c2800f905f4661dd9
- SHA512 dd7269783c9e4506e75e4698d3b98a01728d1432e427cbefa2bdfdf35519a2c3b7e8481eb6a291d222fc0dbab71f5df90eb96a03a1b2a6247a29e810603a50ca
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
498464e09964f85678853264f5c265b5.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
498464e09964f85678853264f5c265b5.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
ddcbd6366de67d1cf1d10203593a074aab7abd55
Attributes
-
url4cnc
https://telete.in/jdiamond13
rc4.plain
rc4.plain
Targets
-
- Target 498464e09964f85678853264f5c265b5.exe
- Size 578KB
- SHA256 6285cfd7bfe0a8dfee88ba7f54b658c2f9b677e61d010396355c5ef5781e047d
- MD5 498464e09964f85678853264f5c265b5
- SHA1 b1afa813527d6ac434e0f59c2800f905f4661dd9
- SHA512 dd7269783c9e4506e75e4698d3b98a01728d1432e427cbefa2bdfdf35519a2c3b7e8481eb6a291d222fc0dbab71f5df90eb96a03a1b2a6247a29e810603a50ca
- MD5 SHA1 SHA512
-
Suspicious use of NtCreateProcessExOtherParentProcess