General
-
Target
2f425bdf5f2b5321d92d6d1af7891e6fc6bbe35d239c1042e67d8ce311dda172
-
Size
419KB
-
Sample
210926-y3anhsfcbm
-
MD5
45cee878fc97e281c85c1d1dc6ee9447
-
SHA1
df5ed195254b5749046b909883e25c85457b2368
-
SHA256
2f425bdf5f2b5321d92d6d1af7891e6fc6bbe35d239c1042e67d8ce311dda172
-
SHA512
5549a9d608ba695403d1214b67c57ebec2ab0b0bb345ddd9c9790b4332109067ba616ad5311038e099e0efa50ea331fee02c62311a45f9debe936372ee512068
Static task
static1
Malware Config
Extracted
raccoon
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
-
url4cnc
https://t.me/agrybirdsgamerept
Targets
-
-
Target
2f425bdf5f2b5321d92d6d1af7891e6fc6bbe35d239c1042e67d8ce311dda172
-
Size
419KB
-
MD5
45cee878fc97e281c85c1d1dc6ee9447
-
SHA1
df5ed195254b5749046b909883e25c85457b2368
-
SHA256
2f425bdf5f2b5321d92d6d1af7891e6fc6bbe35d239c1042e67d8ce311dda172
-
SHA512
5549a9d608ba695403d1214b67c57ebec2ab0b0bb345ddd9c9790b4332109067ba616ad5311038e099e0efa50ea331fee02c62311a45f9debe936372ee512068
-
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
-
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-