General
- Target 96f7aff2b4a28fb3255e30c5b0e21c17.exe
- Size 433KB
- Sample210926-cf5z9aebg3
- SHA256 0ae0bd243586f0047bad043b1c143232516e41c3a84d9e3003ca05fa91f82096
- MD5 96f7aff2b4a28fb3255e30c5b0e21c17
- SHA1 6a0fc6624b0d09215411625ffed00cb27a845dc2
- SHA512 1834f3e0ba881079be22ee942092e8597c71dda4cfc1cb82d604b5fc20aee319f6449e33ea7aaa0b4db0e2540440558cd7f829dd015addca8e011813e72bc85a
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
96f7aff2b4a28fb3255e30c5b0e21c17.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
96f7aff2b4a28fb3255e30c5b0e21c17.exe
Resource
win10-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target 96f7aff2b4a28fb3255e30c5b0e21c17.exe
- Size 433KB
- SHA256 0ae0bd243586f0047bad043b1c143232516e41c3a84d9e3003ca05fa91f82096
- MD5 96f7aff2b4a28fb3255e30c5b0e21c17
- SHA1 6a0fc6624b0d09215411625ffed00cb27a845dc2
- SHA512 1834f3e0ba881079be22ee942092e8597c71dda4cfc1cb82d604b5fc20aee319f6449e33ea7aaa0b4db0e2540440558cd7f829dd015addca8e011813e72bc85a
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.