General
-
Target
9042F3B864A63F18F0017C9ED1BDBA24.exe
-
Size
603KB
-
Sample
210621-kf9jmmq98x
-
MD5
9042f3b864a63f18f0017c9ed1bdba24
-
SHA1
c684bfaf5e5c8f3837953cfcb91493c106aae8e6
-
SHA256
b4ae66ae60bce1d66bf3359720c2be58cb944b9c47cba4a06defb6f3ebc58347
-
SHA512
f968a4a4aa060eadf21a3c1efcd4f02cbd2ff9393400a067379f5de409ed8a6c4f13c03cadaa321a7081e9a597d26e00b5c6b5cdef36981c66968c52d816342c
Static task
static1
Behavioral task
behavioral1
Sample
9042F3B864A63F18F0017C9ED1BDBA24.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
9042F3B864A63F18F0017C9ED1BDBA24.exe
Resource
win10v20210410
Malware Config
Extracted
raccoon
033290187f927bc60a9d7571f4b6be0b4066e20d
-
url4cnc
https://tttttt.me/jmaybech
Targets
-
-
Target
9042F3B864A63F18F0017C9ED1BDBA24.exe
-
Size
603KB
-
MD5
9042f3b864a63f18f0017c9ed1bdba24
-
SHA1
c684bfaf5e5c8f3837953cfcb91493c106aae8e6
-
SHA256
b4ae66ae60bce1d66bf3359720c2be58cb944b9c47cba4a06defb6f3ebc58347
-
SHA512
f968a4a4aa060eadf21a3c1efcd4f02cbd2ff9393400a067379f5de409ed8a6c4f13c03cadaa321a7081e9a597d26e00b5c6b5cdef36981c66968c52d816342c
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-