General
-
Target
e3195b8479376b3fa5a9f0d75a4d602abcb9ab66b0ff72cc8359a9db3d430e12
-
Size
555KB
-
Sample
211001-ey932aagf2
-
MD5
e11fcea90dd1ec7ca8e6b747d954c20e
-
SHA1
a040a76a9c5b44c03af8a11d7894c9e413d86efb
-
SHA256
e3195b8479376b3fa5a9f0d75a4d602abcb9ab66b0ff72cc8359a9db3d430e12
-
SHA512
3efb687504b4a56da89f65073b22e5950d06e12711de4f2bb0e8f54bcb2446b23c87e9c20e1052bb9df8be279c1e32b86ac799353dfbe94f235c634f86f403ec
Static task
static1
Behavioral task
behavioral1
Sample
e3195b8479376b3fa5a9f0d75a4d602abcb9ab66b0ff72cc8359a9db3d430e12.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
e3195b8479376b3fa5a9f0d75a4d602abcb9ab66b0ff72cc8359a9db3d430e12
-
Size
555KB
-
MD5
e11fcea90dd1ec7ca8e6b747d954c20e
-
SHA1
a040a76a9c5b44c03af8a11d7894c9e413d86efb
-
SHA256
e3195b8479376b3fa5a9f0d75a4d602abcb9ab66b0ff72cc8359a9db3d430e12
-
SHA512
3efb687504b4a56da89f65073b22e5950d06e12711de4f2bb0e8f54bcb2446b23c87e9c20e1052bb9df8be279c1e32b86ac799353dfbe94f235c634f86f403ec
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-