General
- Target c483042e75dddd3efc6c85322999150440dec8ebd4e25.exe
- Size 434KB
- Sample210926-aayymseag3
- SHA256 c483042e75dddd3efc6c85322999150440dec8ebd4e253b6a7bb7efb77000531
- MD5 9cfe77fea71d4c23baec4f40b5ded375
- SHA1 b3d6ff2999b9b14c2a12eee830a17920cf8603b3
- SHA512 9107632926ea0585210096bb1429ab26258430c4595787fa4423e55c61e87a146d7883a6415dee1f4afb26f62816943a9af3ef5e0aadb505b95823fbcc7e9eca
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c483042e75dddd3efc6c85322999150440dec8ebd4e25.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
c483042e75dddd3efc6c85322999150440dec8ebd4e25.exe
Resource
win10-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target c483042e75dddd3efc6c85322999150440dec8ebd4e25.exe
- Size 434KB
- SHA256 c483042e75dddd3efc6c85322999150440dec8ebd4e253b6a7bb7efb77000531
- MD5 9cfe77fea71d4c23baec4f40b5ded375
- SHA1 b3d6ff2999b9b14c2a12eee830a17920cf8603b3
- SHA512 9107632926ea0585210096bb1429ab26258430c4595787fa4423e55c61e87a146d7883a6415dee1f4afb26f62816943a9af3ef5e0aadb505b95823fbcc7e9eca
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.