General
- Target 32c1eaf2c30d6c5625a6a4e524e3e846.exe
- Size 519KB
- Sample211002-c6fs2sddg2
- SHA256 67ab10bb1648fcc334b869e00535aa1cae155bb898f07efc0aba2d9e1ab53cf6
- MD5 32c1eaf2c30d6c5625a6a4e524e3e846
- SHA1 4a8285529c33d2637e918064c0ec08d02b1170ea
- SHA512 c3cb866dbfa62a30715f1349e89b9fee1f1d7ee249bd08b21c20c46779c37a6f1d20839c8934ed96a391d22c7e9e7f3b87948ac25b62ded8546efd6426797a74
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
32c1eaf2c30d6c5625a6a4e524e3e846.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
32c1eaf2c30d6c5625a6a4e524e3e846.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target 32c1eaf2c30d6c5625a6a4e524e3e846.exe
- Size 519KB
- SHA256 67ab10bb1648fcc334b869e00535aa1cae155bb898f07efc0aba2d9e1ab53cf6
- MD5 32c1eaf2c30d6c5625a6a4e524e3e846
- SHA1 4a8285529c33d2637e918064c0ec08d02b1170ea
- SHA512 c3cb866dbfa62a30715f1349e89b9fee1f1d7ee249bd08b21c20c46779c37a6f1d20839c8934ed96a391d22c7e9e7f3b87948ac25b62ded8546efd6426797a74
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.