General
- Target bb562ac5ca630981e99a9885c1ccc9fe.exe
- Size 420KB
- Sample210829-5khdd84qln
- SHA256 8db638400434082e7531a28efe594057779e41a771eefacf3c5e8ecd3bc27d83
- MD5 bb562ac5ca630981e99a9885c1ccc9fe
- SHA1 d86ca041233b1dcaea084c99da7c18b03e1f7afd
- SHA512 b9df500a73d34ab12a82155101734c3c0526c9d68cf4ddfc925481db2be89702acbaf28cb55ef0a2bd798ec7dc3ab20995b6bd345eac3a32591b1603bf1a0925
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
bb562ac5ca630981e99a9885c1ccc9fe.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
bb562ac5ca630981e99a9885c1ccc9fe.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
6e76410dbdf2085ebcf2777560bd8cb0790329c9
Attributes
-
url4cnc
https://telete.in/bibiOutriggr1
rc4.plain
rc4.plain
Targets
-
- Target bb562ac5ca630981e99a9885c1ccc9fe.exe
- Size 420KB
- SHA256 8db638400434082e7531a28efe594057779e41a771eefacf3c5e8ecd3bc27d83
- MD5 bb562ac5ca630981e99a9885c1ccc9fe
- SHA1 d86ca041233b1dcaea084c99da7c18b03e1f7afd
- SHA512 b9df500a73d34ab12a82155101734c3c0526c9d68cf4ddfc925481db2be89702acbaf28cb55ef0a2bd798ec7dc3ab20995b6bd345eac3a32591b1603bf1a0925
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.