General
-
Target
7e4c53136bc738fa1d362aa09f909dd573d00a4fa33e190d47b79e4c768d332d
-
Size
495KB
-
Sample
210930-xp91saadb6
-
MD5
fdda2b470e297df8b220427e91c5541a
-
SHA1
3276a229b244f8feb4079648701b496fe08ebcb0
-
SHA256
7e4c53136bc738fa1d362aa09f909dd573d00a4fa33e190d47b79e4c768d332d
-
SHA512
53eea558ca2876ac5e2b88fdb10760cbc0e28abc21ccfa35535171d2dc4a907ad69b8bdc4c41861abc2b7bf99e7d1f73c192967bcebeea7b5aa897a020f592b2
Static task
static1
Behavioral task
behavioral1
Sample
7e4c53136bc738fa1d362aa09f909dd573d00a4fa33e190d47b79e4c768d332d.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
7e4c53136bc738fa1d362aa09f909dd573d00a4fa33e190d47b79e4c768d332d
-
Size
495KB
-
MD5
fdda2b470e297df8b220427e91c5541a
-
SHA1
3276a229b244f8feb4079648701b496fe08ebcb0
-
SHA256
7e4c53136bc738fa1d362aa09f909dd573d00a4fa33e190d47b79e4c768d332d
-
SHA512
53eea558ca2876ac5e2b88fdb10760cbc0e28abc21ccfa35535171d2dc4a907ad69b8bdc4c41861abc2b7bf99e7d1f73c192967bcebeea7b5aa897a020f592b2
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-