General
- Target 7a1f80468c3aa870a2d0eb8e02adb796.exe
- Size 573KB
- Sample210524-kbgcxtjsvs
- SHA256 7bd8a1e4619432240da40627a5b05eed35e3ba0a83ca329f9b5b0f8efc86c2bc
- MD5 7a1f80468c3aa870a2d0eb8e02adb796
- SHA1 9128868ade2a496e4d9ae7b986c13f32c6eede7e
- SHA512 ddfe6eddb57c2555821fb2e916149d4ceec7fe3e6d46fd365db2c85c06a090227cdcf3cd0f42752751fe20792fde9e986b9d2d17e9e724a7587eb7778057da00
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
7a1f80468c3aa870a2d0eb8e02adb796.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
7a1f80468c3aa870a2d0eb8e02adb796.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
f22a6327920c25827041427aa3d4673334aa22ea
Attributes
-
url4cnc
https://tttttt.me/baudemars
rc4.plain
rc4.plain
Targets
-
- Target 7a1f80468c3aa870a2d0eb8e02adb796.exe
- Size 573KB
- SHA256 7bd8a1e4619432240da40627a5b05eed35e3ba0a83ca329f9b5b0f8efc86c2bc
- MD5 7a1f80468c3aa870a2d0eb8e02adb796
- SHA1 9128868ade2a496e4d9ae7b986c13f32c6eede7e
- SHA512 ddfe6eddb57c2555821fb2e916149d4ceec7fe3e6d46fd365db2c85c06a090227cdcf3cd0f42752751fe20792fde9e986b9d2d17e9e724a7587eb7778057da00
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.