General
- Target 386db4f042918f4da5afc5ea3743a790.exe
- Size 514KB
- Sample211002-285bvsegf8
- SHA256 30d8d3ac05ada80391a75a5f15b3d2a265bb06bc0e1dd48ef46f6d7c9099fc42
- MD5 386db4f042918f4da5afc5ea3743a790
- SHA1 2e0609e67b2efab34ae36ecf0d69901322ff82ff
- SHA512 a620ed418c0e25d8de95058ba66757c9ac97a86c6abcc234160ecbcbff814e2b9f62280e1dc0c0dbffd825e108cbb3121b84f0643940636bbde88e98a6efacee
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
386db4f042918f4da5afc5ea3743a790.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
386db4f042918f4da5afc5ea3743a790.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target 386db4f042918f4da5afc5ea3743a790.exe
- Size 514KB
- SHA256 30d8d3ac05ada80391a75a5f15b3d2a265bb06bc0e1dd48ef46f6d7c9099fc42
- MD5 386db4f042918f4da5afc5ea3743a790
- SHA1 2e0609e67b2efab34ae36ecf0d69901322ff82ff
- SHA512 a620ed418c0e25d8de95058ba66757c9ac97a86c6abcc234160ecbcbff814e2b9f62280e1dc0c0dbffd825e108cbb3121b84f0643940636bbde88e98a6efacee
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.