General
- Target d27fccf44c5b6e30515f01aa4b5ad4f7.exe
- Size 555KB
- Sample211001-esls9aagd3
- SHA256 832aa6fe9fe6a94b4d852485801fbc757606d5543ff780d30ac9a5fddcc19a8e
- MD5 d27fccf44c5b6e30515f01aa4b5ad4f7
- SHA1 70027defe7bed4b00c1142add95cb659d5a82fde
- SHA512 027fc29938f1596d767aafe7bd4cd9e08e88c1a1a298d67ea504ca08f4e6b11d9acba41ba677decad4c9827a9d71bad5d2824cefb85e123004b3465bd1e4e554
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
d27fccf44c5b6e30515f01aa4b5ad4f7.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
d27fccf44c5b6e30515f01aa4b5ad4f7.exe
Resource
win10-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target d27fccf44c5b6e30515f01aa4b5ad4f7.exe
- Size 555KB
- SHA256 832aa6fe9fe6a94b4d852485801fbc757606d5543ff780d30ac9a5fddcc19a8e
- MD5 d27fccf44c5b6e30515f01aa4b5ad4f7
- SHA1 70027defe7bed4b00c1142add95cb659d5a82fde
- SHA512 027fc29938f1596d767aafe7bd4cd9e08e88c1a1a298d67ea504ca08f4e6b11d9acba41ba677decad4c9827a9d71bad5d2824cefb85e123004b3465bd1e4e554
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.