General
-
Target
58b3cb7dfceff0c3e457b3c5ffbb356a7b2a372d83c98195e0bf5245d2ab23cb
-
Size
505KB
-
Sample
211027-b75ywsaeb6
-
MD5
c46a0522c5da2cfe0952255c317563c1
-
SHA1
8c1556fdcee4ce1a2eb0a03e533e7f46729bfdee
-
SHA256
58b3cb7dfceff0c3e457b3c5ffbb356a7b2a372d83c98195e0bf5245d2ab23cb
-
SHA512
8766c7bbec79ef031c7bad05fb39badb584b324a41c47d7a7b73643910e3b12ee739f25c674813d5debbc1586a3c757cf27c481cb9de877862e0b2647bb0fe3a
Static task
static1
Behavioral task
behavioral1
Sample
58b3cb7dfceff0c3e457b3c5ffbb356a7b2a372d83c98195e0bf5245d2ab23cb.exe
Resource
win10-en-20211014
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
58b3cb7dfceff0c3e457b3c5ffbb356a7b2a372d83c98195e0bf5245d2ab23cb
-
Size
505KB
-
MD5
c46a0522c5da2cfe0952255c317563c1
-
SHA1
8c1556fdcee4ce1a2eb0a03e533e7f46729bfdee
-
SHA256
58b3cb7dfceff0c3e457b3c5ffbb356a7b2a372d83c98195e0bf5245d2ab23cb
-
SHA512
8766c7bbec79ef031c7bad05fb39badb584b324a41c47d7a7b73643910e3b12ee739f25c674813d5debbc1586a3c757cf27c481cb9de877862e0b2647bb0fe3a
-
Suspicious use of NtCreateProcessExOtherParentProcess
-