General
-
Target
a83a2c9c1d86ad0441dbfa921816572f23b78251d8eebe41cd485a2045befb94
-
Size
424KB
-
Sample
210926-rpnjwsehbm
-
MD5
029defa6496bbba41c475e78f25a7d8d
-
SHA1
62b33ed1b89b372e7c7865af138211a88e2cfd11
-
SHA256
a83a2c9c1d86ad0441dbfa921816572f23b78251d8eebe41cd485a2045befb94
-
SHA512
a309c90805c5259d05511503b4006c61d73ac22b4e813caee4c50b47d3be9cd7090fbc3644cc71f8823d09bd085300c28370ba05f4328547c3cee66e3b60ca36
Static task
static1
Malware Config
Extracted
raccoon
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
-
url4cnc
https://t.me/agrybirdsgamerept
Targets
-
-
Target
a83a2c9c1d86ad0441dbfa921816572f23b78251d8eebe41cd485a2045befb94
-
Size
424KB
-
MD5
029defa6496bbba41c475e78f25a7d8d
-
SHA1
62b33ed1b89b372e7c7865af138211a88e2cfd11
-
SHA256
a83a2c9c1d86ad0441dbfa921816572f23b78251d8eebe41cd485a2045befb94
-
SHA512
a309c90805c5259d05511503b4006c61d73ac22b4e813caee4c50b47d3be9cd7090fbc3644cc71f8823d09bd085300c28370ba05f4328547c3cee66e3b60ca36
-
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
-
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-