General
-
Target
4c294ec8d96bee91f18aa7982d3465d2b25439521435c39e83d18fea2f88c64d
-
Size
465KB
-
Sample
211028-sjj5ysgefl
-
MD5
311159d27c5692d26526d49f0f98cbc6
-
SHA1
e64584e554bfaee49228149a11ce77f3ea5a0b65
-
SHA256
4c294ec8d96bee91f18aa7982d3465d2b25439521435c39e83d18fea2f88c64d
-
SHA512
b81bcad00d38df959fd701c02b0d686dd971de513c0fdff4b07e349855e4f39418c8d2a752b4f33897accf7862dbdc505d4d328f92251c64e83e58ecfa4148fb
Static task
static1
Behavioral task
behavioral1
Sample
4c294ec8d96bee91f18aa7982d3465d2b25439521435c39e83d18fea2f88c64d.exe
Resource
win10-en-20211014
Malware Config
Extracted
raccoon
60e59be328fbd2ebac1839ea99411dccb00a6f49
-
url4cnc
http://telegin.top/agrybirdsgamerept
http://ttmirror.top/agrybirdsgamerept
http://teletele.top/agrybirdsgamerept
http://telegalive.top/agrybirdsgamerept
http://toptelete.top/agrybirdsgamerept
http://telegraf.top/agrybirdsgamerept
https://t.me/agrybirdsgamerept
Targets
-
-
Target
4c294ec8d96bee91f18aa7982d3465d2b25439521435c39e83d18fea2f88c64d
-
Size
465KB
-
MD5
311159d27c5692d26526d49f0f98cbc6
-
SHA1
e64584e554bfaee49228149a11ce77f3ea5a0b65
-
SHA256
4c294ec8d96bee91f18aa7982d3465d2b25439521435c39e83d18fea2f88c64d
-
SHA512
b81bcad00d38df959fd701c02b0d686dd971de513c0fdff4b07e349855e4f39418c8d2a752b4f33897accf7862dbdc505d4d328f92251c64e83e58ecfa4148fb
-
Suspicious use of NtCreateProcessExOtherParentProcess
-