General
- Target 2242bd6ead215d66c2b32beb82e97d36.exe
- Size 542KB
- Sample210925-bc9zcsabg8
- SHA256 227c4d5b4d3975c14e7358e444fd6ba4f918f5ca87cb830c3407ca765336552b
- MD5 2242bd6ead215d66c2b32beb82e97d36
- SHA1 06bdbf304a648aa79ab724056c5160872625ed28
- SHA512 2bb01828dbfa11c1128f3144e8a7dfdc6f30d376c18ace249f21a74d43e666ebd900b6fcb25ccf6233e7d6f1633b672e385376ffb0762f7c175988bf51c45f44
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
2242bd6ead215d66c2b32beb82e97d36.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
2242bd6ead215d66c2b32beb82e97d36.exe
Resource
win10-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
89bdb20fae9c32c8b9e6a3e975b823b9b8296f52
Attributes
-
url4cnc
https://t.me/amanwitharm
rc4.plain
rc4.plain
Targets
-
- Target 2242bd6ead215d66c2b32beb82e97d36.exe
- Size 542KB
- SHA256 227c4d5b4d3975c14e7358e444fd6ba4f918f5ca87cb830c3407ca765336552b
- MD5 2242bd6ead215d66c2b32beb82e97d36
- SHA1 06bdbf304a648aa79ab724056c5160872625ed28
- SHA512 2bb01828dbfa11c1128f3144e8a7dfdc6f30d376c18ace249f21a74d43e666ebd900b6fcb25ccf6233e7d6f1633b672e385376ffb0762f7c175988bf51c45f44
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.