General
-
Target
424d5b48e19169520366220056ff9cbe9ac80e2adff0681f9c863cbeee96e594
-
Size
465KB
-
Sample
211026-17yl9aaban
-
MD5
074e927f617fb32d2abf396521790329
-
SHA1
05a3158fd2731cb647b0035f527d52ffbdf1b886
-
SHA256
424d5b48e19169520366220056ff9cbe9ac80e2adff0681f9c863cbeee96e594
-
SHA512
867baafbec4ef0beadd275d0961a12c5971a27db0eae9e564757f66fff8b1e6893eff8a5362c561312fdc051fbc64b4141c115e22b3a20feff246f079ea8f267
Static task
static1
Behavioral task
behavioral1
Sample
424d5b48e19169520366220056ff9cbe9ac80e2adff0681f9c863cbeee96e594.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
424d5b48e19169520366220056ff9cbe9ac80e2adff0681f9c863cbeee96e594
-
Size
465KB
-
MD5
074e927f617fb32d2abf396521790329
-
SHA1
05a3158fd2731cb647b0035f527d52ffbdf1b886
-
SHA256
424d5b48e19169520366220056ff9cbe9ac80e2adff0681f9c863cbeee96e594
-
SHA512
867baafbec4ef0beadd275d0961a12c5971a27db0eae9e564757f66fff8b1e6893eff8a5362c561312fdc051fbc64b4141c115e22b3a20feff246f079ea8f267
-
Suspicious use of NtCreateProcessExOtherParentProcess
-