General
-
Target
596c446e96d473c5d6c4f8f1381253b4.exe
-
Size
419KB
-
Sample
210926-vln8ssfbe8
-
MD5
596c446e96d473c5d6c4f8f1381253b4
-
SHA1
17dabe79faa58085af7f37cb89f9d48ea579334b
-
SHA256
7afac1e8bef468f01d95afdd0e2f03d86d98bb3143d67faa4b4c172ac82d099b
-
SHA512
2c37e2bb4575a0521a309539d75eee7d97916dabf2e3a606aa177aee6c7dd3bfcb70a86b7ce67ee0cd970e27745b09c00e104237b706d545af046b13f13db069
Static task
static1
Behavioral task
behavioral1
Sample
596c446e96d473c5d6c4f8f1381253b4.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
596c446e96d473c5d6c4f8f1381253b4.exe
Resource
win10v20210408
Malware Config
Extracted
raccoon
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
-
url4cnc
https://t.me/agrybirdsgamerept
Targets
-
-
Target
596c446e96d473c5d6c4f8f1381253b4.exe
-
Size
419KB
-
MD5
596c446e96d473c5d6c4f8f1381253b4
-
SHA1
17dabe79faa58085af7f37cb89f9d48ea579334b
-
SHA256
7afac1e8bef468f01d95afdd0e2f03d86d98bb3143d67faa4b4c172ac82d099b
-
SHA512
2c37e2bb4575a0521a309539d75eee7d97916dabf2e3a606aa177aee6c7dd3bfcb70a86b7ce67ee0cd970e27745b09c00e104237b706d545af046b13f13db069
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-