General
- Target 8211949786137560be90cbc71a7720b2.exe
- Size 484KB
- Sample210805-3bt7nvmwya
- SHA256 0fb7ffc5ccc6a4250153508f8af38b9f70aa06516164c441aa2ef81cf1289cd5
- MD5 8211949786137560be90cbc71a7720b2
- SHA1 48ad5da16021524149c6fcc22c2b81d7c605da52
- SHA512 39eaa27741f2d2099ece6ca29438efb89724a1a0667f6d2047dd572a2198baca4ea8b0e1d7bc524a8cada8256a5d1ad3884185b4856014bfd814ab952b6e94c7
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
8211949786137560be90cbc71a7720b2.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
8211949786137560be90cbc71a7720b2.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
cd8dc1031358b1aec55cc6bc447df1018b068607
Attributes
-
url4cnc
https://telete.in/jagressor_kz
rc4.plain
rc4.plain
Targets
-
- Target 8211949786137560be90cbc71a7720b2.exe
- Size 484KB
- SHA256 0fb7ffc5ccc6a4250153508f8af38b9f70aa06516164c441aa2ef81cf1289cd5
- MD5 8211949786137560be90cbc71a7720b2
- SHA1 48ad5da16021524149c6fcc22c2b81d7c605da52
- SHA512 39eaa27741f2d2099ece6ca29438efb89724a1a0667f6d2047dd572a2198baca4ea8b0e1d7bc524a8cada8256a5d1ad3884185b4856014bfd814ab952b6e94c7
- MD5 SHA1 SHA512
-
Raccoon Stealer Payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.