General
-
Target
4e141279fe6a90fe8b2180525e74954f01ca96ebf729ec507305a31ab3c50d88
-
Size
589KB
-
Sample
211027-2fp2gagfc6
-
MD5
9578b86b62c3680a2fe1cef96b019438
-
SHA1
c52c19c97dae5d237fa6d525ba9b7792607dc8ca
-
SHA256
4e141279fe6a90fe8b2180525e74954f01ca96ebf729ec507305a31ab3c50d88
-
SHA512
5505b52aeddbf7942c204f9c08b7e828ce4c52d1d56d1ab933c230cfd74c028496e3b107cba3368f2690156e614c4d10f0e2b4f595f646527348852dac3d01e5
Static task
static1
Behavioral task
behavioral1
Sample
4e141279fe6a90fe8b2180525e74954f01ca96ebf729ec507305a31ab3c50d88.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
4e141279fe6a90fe8b2180525e74954f01ca96ebf729ec507305a31ab3c50d88
-
Size
589KB
-
MD5
9578b86b62c3680a2fe1cef96b019438
-
SHA1
c52c19c97dae5d237fa6d525ba9b7792607dc8ca
-
SHA256
4e141279fe6a90fe8b2180525e74954f01ca96ebf729ec507305a31ab3c50d88
-
SHA512
5505b52aeddbf7942c204f9c08b7e828ce4c52d1d56d1ab933c230cfd74c028496e3b107cba3368f2690156e614c4d10f0e2b4f595f646527348852dac3d01e5
-
Suspicious use of NtCreateProcessExOtherParentProcess
-