General
-
Target
1d18e2a2ea46326d627c723fba8bb49b0771fce9d3702.exe
-
Size
430KB
-
Sample
210926-n7fp8aegh5
-
MD5
c370776d145e3a91f1508f19b4aa91ad
-
SHA1
5a0466bbe35891a714bd990416c161bc043bf1ee
-
SHA256
1d18e2a2ea46326d627c723fba8bb49b0771fce9d3702c297df881a7014e355e
-
SHA512
ac3ddde1c683e50f8a27f22cf79b60a71462296a3fce70f64acfbf9cd219e96cf2d957db94bdd60def6fc80a9f6300802d16171224fdff11f316bd536eb68252
Static task
static1
Behavioral task
behavioral1
Sample
1d18e2a2ea46326d627c723fba8bb49b0771fce9d3702.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
1d18e2a2ea46326d627c723fba8bb49b0771fce9d3702.exe
Resource
win10v20210408
Malware Config
Extracted
raccoon
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
-
url4cnc
https://t.me/agrybirdsgamerept
Targets
-
-
Target
1d18e2a2ea46326d627c723fba8bb49b0771fce9d3702.exe
-
Size
430KB
-
MD5
c370776d145e3a91f1508f19b4aa91ad
-
SHA1
5a0466bbe35891a714bd990416c161bc043bf1ee
-
SHA256
1d18e2a2ea46326d627c723fba8bb49b0771fce9d3702c297df881a7014e355e
-
SHA512
ac3ddde1c683e50f8a27f22cf79b60a71462296a3fce70f64acfbf9cd219e96cf2d957db94bdd60def6fc80a9f6300802d16171224fdff11f316bd536eb68252
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-