General
-
Target
fafee5e8701ba7bc60beb730408222082c470d1f1a04db9972403beb42c9b9eb
-
Size
464KB
-
Sample
211028-km727abha3
-
MD5
d2d1c35672e7e2f17d6cd45d269141c2
-
SHA1
1e7d18ce4d9b229d612d36de92e96d751acbf2f9
-
SHA256
fafee5e8701ba7bc60beb730408222082c470d1f1a04db9972403beb42c9b9eb
-
SHA512
e35541486e409ef5506351153bb6b5d810b195057f8619693bfe57a4bb43a6d77fdb6348600d5886f3bf0b32846e314a28c15c4f35c32bf4b88430ed8e0fdf8b
Static task
static1
Behavioral task
behavioral1
Sample
fafee5e8701ba7bc60beb730408222082c470d1f1a04db9972403beb42c9b9eb.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
fafee5e8701ba7bc60beb730408222082c470d1f1a04db9972403beb42c9b9eb
-
Size
464KB
-
MD5
d2d1c35672e7e2f17d6cd45d269141c2
-
SHA1
1e7d18ce4d9b229d612d36de92e96d751acbf2f9
-
SHA256
fafee5e8701ba7bc60beb730408222082c470d1f1a04db9972403beb42c9b9eb
-
SHA512
e35541486e409ef5506351153bb6b5d810b195057f8619693bfe57a4bb43a6d77fdb6348600d5886f3bf0b32846e314a28c15c4f35c32bf4b88430ed8e0fdf8b
-
Suspicious use of NtCreateProcessExOtherParentProcess
-