General
-
Target
5babc5b5da7f48bee3ab4bb22dee5864.exe
-
Size
430KB
-
Sample
210926-mtzeqsefh3
-
MD5
5babc5b5da7f48bee3ab4bb22dee5864
-
SHA1
5cffa0c9f2778d6096ec8cb214d481126f2ef765
-
SHA256
9087412ce39a9f4988bb6d7e50018d3f1154e29f4edfc9d4f1d7b87609402bc0
-
SHA512
8c93557ac5a32c0ff75c33be1d7034ff083d7b3f9a7011089ac83d1a059da29cf34a5a0adba89d44d654a0f2cd6aec7eaabe3378209e53fff235845050e24749
Static task
static1
Behavioral task
behavioral1
Sample
5babc5b5da7f48bee3ab4bb22dee5864.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
5babc5b5da7f48bee3ab4bb22dee5864.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
5babc5b5da7f48bee3ab4bb22dee5864.exe
-
Size
430KB
-
MD5
5babc5b5da7f48bee3ab4bb22dee5864
-
SHA1
5cffa0c9f2778d6096ec8cb214d481126f2ef765
-
SHA256
9087412ce39a9f4988bb6d7e50018d3f1154e29f4edfc9d4f1d7b87609402bc0
-
SHA512
8c93557ac5a32c0ff75c33be1d7034ff083d7b3f9a7011089ac83d1a059da29cf34a5a0adba89d44d654a0f2cd6aec7eaabe3378209e53fff235845050e24749
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-