General
- Target 2cc6d4f1c214e4d44d078773dc5469d0.exe
- Size 523KB
- Sample210814-24365n5r4e
- SHA256 dfe17befba0a9abd5a9f8db647be53e6a8dbfc8e2ba9b217088714a5eff7ed70
- MD5 2cc6d4f1c214e4d44d078773dc5469d0
- SHA1 6dc7a3ebc447aa9b4edb14b670452336c110e646
- SHA512 d825c537075e2d9149647d2782c98a197dd6cec1319d2ce0101004781344c6299dd0f1010f37fb51cc2694c0066d01c02bd1261f503dda18ceef0b9eb6f5453f
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
2cc6d4f1c214e4d44d078773dc5469d0.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
2cc6d4f1c214e4d44d078773dc5469d0.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
93d3ccba4a3cbd5e268873fc1760b2335272e198
Attributes
-
url4cnc
https://telete.in/opa4kiprivatem
rc4.plain
rc4.plain
Targets
-
- Target 2cc6d4f1c214e4d44d078773dc5469d0.exe
- Size 523KB
- SHA256 dfe17befba0a9abd5a9f8db647be53e6a8dbfc8e2ba9b217088714a5eff7ed70
- MD5 2cc6d4f1c214e4d44d078773dc5469d0
- SHA1 6dc7a3ebc447aa9b4edb14b670452336c110e646
- SHA512 d825c537075e2d9149647d2782c98a197dd6cec1319d2ce0101004781344c6299dd0f1010f37fb51cc2694c0066d01c02bd1261f503dda18ceef0b9eb6f5453f
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.