General
-
Target
fd4184b2cb4875c92b8b3fafea1cedf577cfb42c91dbf04b5e8c18a8ddeb385e
-
Size
464KB
-
Sample
211028-mt4z8acbf6
-
MD5
fca9bd1b96982e3448648fd730d73d92
-
SHA1
2af055e5476ee27fcc84f210737d27ca75328188
-
SHA256
fd4184b2cb4875c92b8b3fafea1cedf577cfb42c91dbf04b5e8c18a8ddeb385e
-
SHA512
c15548a4f4aed94010ce37ef93fd1de54d7904d38d76da552cc0da3c07cd463f419c4761782833592fc650a1540b48a1c4eb2b10f48f3616ebf323224592a5e0
Static task
static1
Behavioral task
behavioral1
Sample
fd4184b2cb4875c92b8b3fafea1cedf577cfb42c91dbf04b5e8c18a8ddeb385e.exe
Resource
win10-en-20211014
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
fd4184b2cb4875c92b8b3fafea1cedf577cfb42c91dbf04b5e8c18a8ddeb385e
-
Size
464KB
-
MD5
fca9bd1b96982e3448648fd730d73d92
-
SHA1
2af055e5476ee27fcc84f210737d27ca75328188
-
SHA256
fd4184b2cb4875c92b8b3fafea1cedf577cfb42c91dbf04b5e8c18a8ddeb385e
-
SHA512
c15548a4f4aed94010ce37ef93fd1de54d7904d38d76da552cc0da3c07cd463f419c4761782833592fc650a1540b48a1c4eb2b10f48f3616ebf323224592a5e0
-
Suspicious use of NtCreateProcessExOtherParentProcess
-