General
-
Target
406905f1f0854602cbc0b49b25b881507bfe318d7864ec54a9a4a20834bbce4d
-
Size
465KB
-
Sample
211026-xcw86aaah6
-
MD5
e8848b4acf9254267ad6da15a14706dd
-
SHA1
5d5d13d98df72123638f9d8eb4a330f4f2d5789c
-
SHA256
406905f1f0854602cbc0b49b25b881507bfe318d7864ec54a9a4a20834bbce4d
-
SHA512
f7b7dccc92726738fd07d23a9f737af1744eac336cf318c4c9279e1be63e2221f4546e0c38c9d08fb78895f9478c494c2c59649cb5ba68944be13497d9301bb6
Static task
static1
Behavioral task
behavioral1
Sample
406905f1f0854602cbc0b49b25b881507bfe318d7864ec54a9a4a20834bbce4d.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
406905f1f0854602cbc0b49b25b881507bfe318d7864ec54a9a4a20834bbce4d
-
Size
465KB
-
MD5
e8848b4acf9254267ad6da15a14706dd
-
SHA1
5d5d13d98df72123638f9d8eb4a330f4f2d5789c
-
SHA256
406905f1f0854602cbc0b49b25b881507bfe318d7864ec54a9a4a20834bbce4d
-
SHA512
f7b7dccc92726738fd07d23a9f737af1744eac336cf318c4c9279e1be63e2221f4546e0c38c9d08fb78895f9478c494c2c59649cb5ba68944be13497d9301bb6
-
Suspicious use of NtCreateProcessExOtherParentProcess
-