General
-
Target
a7be617de2391c3eab00147dd9d1b2d82af1d18ea7320bbaff20750913f7a6d4
-
Size
464KB
-
Sample
211028-gzxv7shebp
-
MD5
0f501c684fc4bb8e1b28d00b83f24232
-
SHA1
2f7cce6934a57dbc90f859b437d289719c42ff20
-
SHA256
a7be617de2391c3eab00147dd9d1b2d82af1d18ea7320bbaff20750913f7a6d4
-
SHA512
a9bf8ed4a999bb982595467d69be84db53ec3174125afe97278301fb3d7ffbcf793cc764bc3aae78298f8221fc0111b52e5c31ce69fa7ed7a1db6eefb34c4d96
Static task
static1
Behavioral task
behavioral1
Sample
a7be617de2391c3eab00147dd9d1b2d82af1d18ea7320bbaff20750913f7a6d4.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
a7be617de2391c3eab00147dd9d1b2d82af1d18ea7320bbaff20750913f7a6d4
-
Size
464KB
-
MD5
0f501c684fc4bb8e1b28d00b83f24232
-
SHA1
2f7cce6934a57dbc90f859b437d289719c42ff20
-
SHA256
a7be617de2391c3eab00147dd9d1b2d82af1d18ea7320bbaff20750913f7a6d4
-
SHA512
a9bf8ed4a999bb982595467d69be84db53ec3174125afe97278301fb3d7ffbcf793cc764bc3aae78298f8221fc0111b52e5c31ce69fa7ed7a1db6eefb34c4d96
-
Suspicious use of NtCreateProcessExOtherParentProcess
-