General
- Target deeec872ffc52cc0ed478afaba8afd4e.exe
- Size 518KB
- Sample211002-dcq8csddg6
- SHA256 ce500f33219f885ee169c920cc614316b9f94d3473a1708b5c65eb3cebf15cb6
- MD5 deeec872ffc52cc0ed478afaba8afd4e
- SHA1 24528ac984f543b743e509666d07a28fe5eb29c4
- SHA512 dcd15f8fe164ed0a3694500128f7f36194ee35520a895848ed33b6a252fc56c866f3323225bffa186d70d143112317a1c23ba90a4df90680f60ff03d6a6c228d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
deeec872ffc52cc0ed478afaba8afd4e.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
deeec872ffc52cc0ed478afaba8afd4e.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target deeec872ffc52cc0ed478afaba8afd4e.exe
- Size 518KB
- SHA256 ce500f33219f885ee169c920cc614316b9f94d3473a1708b5c65eb3cebf15cb6
- MD5 deeec872ffc52cc0ed478afaba8afd4e
- SHA1 24528ac984f543b743e509666d07a28fe5eb29c4
- SHA512 dcd15f8fe164ed0a3694500128f7f36194ee35520a895848ed33b6a252fc56c866f3323225bffa186d70d143112317a1c23ba90a4df90680f60ff03d6a6c228d
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.