General
-
Target
d1e24c60e52fe2eed06d0b9748b4f6d6c3b09ab51cbc1ea1a6fe3cc86035f34b
-
Size
424KB
-
Sample
210926-sj5rnafaf4
-
MD5
9718ee5e3ddf885f76974d622b1dbe2c
-
SHA1
c202fe0bfe73ec094bf270600d9106c3a78718be
-
SHA256
d1e24c60e52fe2eed06d0b9748b4f6d6c3b09ab51cbc1ea1a6fe3cc86035f34b
-
SHA512
683fc746a81530146b79b9306b2d8b93007b821e679a5db63d29ffd62cb6c8a4d7690f552a459d163c563e8d3e8c1ad0be4f30420b2028f8d6e6d3dc970a9ef7
Static task
static1
Behavioral task
behavioral1
Sample
d1e24c60e52fe2eed06d0b9748b4f6d6c3b09ab51cbc1ea1a6fe3cc86035f34b.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
d1e24c60e52fe2eed06d0b9748b4f6d6c3b09ab51cbc1ea1a6fe3cc86035f34b
-
Size
424KB
-
MD5
9718ee5e3ddf885f76974d622b1dbe2c
-
SHA1
c202fe0bfe73ec094bf270600d9106c3a78718be
-
SHA256
d1e24c60e52fe2eed06d0b9748b4f6d6c3b09ab51cbc1ea1a6fe3cc86035f34b
-
SHA512
683fc746a81530146b79b9306b2d8b93007b821e679a5db63d29ffd62cb6c8a4d7690f552a459d163c563e8d3e8c1ad0be4f30420b2028f8d6e6d3dc970a9ef7
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-