General
-
Target
a76b2d1d89b5b8cf99dbd6a5730a9db2c25571e26e2bf26b5ba42a4b604a0aab
-
Size
554KB
-
Sample
211001-gx5g9sahg7
-
MD5
f5cfaca5906c618595a8fd4f76b1bf62
-
SHA1
aa90c95739e8737c866de20452710ffe21dd3e50
-
SHA256
a76b2d1d89b5b8cf99dbd6a5730a9db2c25571e26e2bf26b5ba42a4b604a0aab
-
SHA512
ce84d51903492cb9a86c5f723b091a262f9b64e5f0586540608e2d7a583bc7aa8000570d5e7734200bd1303c1e466ed2d47a9e359b5409631eaa79f4da67bf33
Static task
static1
Behavioral task
behavioral1
Sample
a76b2d1d89b5b8cf99dbd6a5730a9db2c25571e26e2bf26b5ba42a4b604a0aab.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
a76b2d1d89b5b8cf99dbd6a5730a9db2c25571e26e2bf26b5ba42a4b604a0aab
-
Size
554KB
-
MD5
f5cfaca5906c618595a8fd4f76b1bf62
-
SHA1
aa90c95739e8737c866de20452710ffe21dd3e50
-
SHA256
a76b2d1d89b5b8cf99dbd6a5730a9db2c25571e26e2bf26b5ba42a4b604a0aab
-
SHA512
ce84d51903492cb9a86c5f723b091a262f9b64e5f0586540608e2d7a583bc7aa8000570d5e7734200bd1303c1e466ed2d47a9e359b5409631eaa79f4da67bf33
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-