General
- Target SecuriteInfo.com.W32.AIDetect.malware1.20068.14631
- Size 447KB
- Sample210327-dd4sc4239x
- SHA256 a7b93c2fbb727ed832ef535e78fa66ad027e0ca8c9507ca5001112be967b0fe7
- MD5 a80c40e54f6960453d1299d466a00456
- SHA1 008eb78fcb227b409ccbf23c2efe9b361d7da688
- SHA512 1f45ae4add4e8ea3b738349f1b401333c184c856a2c205cddcad7e864ed87a1d1e1a10d05835e86f16246313abb1897734b94ab9f05ef352b1de5c13e9c17bac
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.AIDetect.malware1.20068.14631.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.AIDetect.malware1.20068.14631.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
16992cd33145ccbb6feeacb4e84400a56448fa14
Attributes
-
url4cnc
https://telete.in/baudemars
rc4.plain
rc4.plain
Targets
-
- Target SecuriteInfo.com.W32.AIDetect.malware1.20068.14631
- Size 447KB
- SHA256 a7b93c2fbb727ed832ef535e78fa66ad027e0ca8c9507ca5001112be967b0fe7
- MD5 a80c40e54f6960453d1299d466a00456
- SHA1 008eb78fcb227b409ccbf23c2efe9b361d7da688
- SHA512 1f45ae4add4e8ea3b738349f1b401333c184c856a2c205cddcad7e864ed87a1d1e1a10d05835e86f16246313abb1897734b94ab9f05ef352b1de5c13e9c17bac
- MD5 SHA1 SHA512
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.