General
- Target 273041b66acaac686323ddd8715e944e.exe
- Size 513KB
- Sample211002-q8pevsedb6
- SHA256 40e2c0afdd796dcb37da40867e0362c076e89f82fc7cfa3ff324e87a910b2345
- MD5 273041b66acaac686323ddd8715e944e
- SHA1 737cded9d5e367822cea61f259c741d8d3e1aba9
- SHA512 9c12e90dbb3c43c1cc63e23451559243f21d1df070ddee9d8e24bb4237cb0890e8ffebe4e47702063b5020bc0a9f74e0646a35b1b9b5f18860bf871c2fda9633
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
273041b66acaac686323ddd8715e944e.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
273041b66acaac686323ddd8715e944e.exe
Resource
win10-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target 273041b66acaac686323ddd8715e944e.exe
- Size 513KB
- SHA256 40e2c0afdd796dcb37da40867e0362c076e89f82fc7cfa3ff324e87a910b2345
- MD5 273041b66acaac686323ddd8715e944e
- SHA1 737cded9d5e367822cea61f259c741d8d3e1aba9
- SHA512 9c12e90dbb3c43c1cc63e23451559243f21d1df070ddee9d8e24bb4237cb0890e8ffebe4e47702063b5020bc0a9f74e0646a35b1b9b5f18860bf871c2fda9633
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.