General
-
Target
51eab6aff3092c459dd6e33b5c86b89e5295271923e505eac4fc4f9b31e27482
-
Size
506KB
-
Sample
211027-aqmkjsadg4
-
MD5
afdd13f1365200afbcadcfe2c702c785
-
SHA1
6eb9d5b4280e4070c581a77a23adbd0bcca69ddd
-
SHA256
51eab6aff3092c459dd6e33b5c86b89e5295271923e505eac4fc4f9b31e27482
-
SHA512
c1e0e0b3a05542028f3877b7f472ef86b1a106cec6bb15c78576afdee9cfbfcf45e6f249506fce303531b4216118b6e2a8ecdd39ad85780b643895cb5cc3edef
Static task
static1
Behavioral task
behavioral1
Sample
51eab6aff3092c459dd6e33b5c86b89e5295271923e505eac4fc4f9b31e27482.exe
Resource
win10-en-20211014
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
51eab6aff3092c459dd6e33b5c86b89e5295271923e505eac4fc4f9b31e27482
-
Size
506KB
-
MD5
afdd13f1365200afbcadcfe2c702c785
-
SHA1
6eb9d5b4280e4070c581a77a23adbd0bcca69ddd
-
SHA256
51eab6aff3092c459dd6e33b5c86b89e5295271923e505eac4fc4f9b31e27482
-
SHA512
c1e0e0b3a05542028f3877b7f472ef86b1a106cec6bb15c78576afdee9cfbfcf45e6f249506fce303531b4216118b6e2a8ecdd39ad85780b643895cb5cc3edef
-
Suspicious use of NtCreateProcessExOtherParentProcess
-