General
-
Target
c9348cca612ce15d47db81d80ab64943af007c174c1b504e10bc59f83db188dd
-
Size
538KB
-
Sample
211109-3ep6hsgaa4
-
MD5
8b266c410eee6b2125164cca8eabb957
-
SHA1
9bc15216bf991b1419bf22b0acd0ee90b5db95ea
-
SHA256
c9348cca612ce15d47db81d80ab64943af007c174c1b504e10bc59f83db188dd
-
SHA512
cbf9895368cbbd2affead18471c6e6d511e110fa56d3ef3dd9bc63b8cfe02d2bba7fa311c55afdfa7af09c0bba4e62d77212f7ea67cd373a54bf9cb4392b643e
Static task
static1
Behavioral task
behavioral1
Sample
c9348cca612ce15d47db81d80ab64943af007c174c1b504e10bc59f83db188dd.exe
Resource
win10-en-20211104
Malware Config
Extracted
raccoon
1.8.3-hotfix
fcdc156d3872c18d25e3ee45499599b45e492a67
-
url4cnc
http://178.23.190.57/rino115sipsip
http://91.219.236.162/rino115sipsip
http://185.163.47.176/rino115sipsip
http://193.38.54.238/rino115sipsip
http://74.119.192.122/rino115sipsip
http://91.219.236.240/rino115sipsip
https://t.me/rino115sipsip
Targets
-
-
Target
c9348cca612ce15d47db81d80ab64943af007c174c1b504e10bc59f83db188dd
-
Size
538KB
-
MD5
8b266c410eee6b2125164cca8eabb957
-
SHA1
9bc15216bf991b1419bf22b0acd0ee90b5db95ea
-
SHA256
c9348cca612ce15d47db81d80ab64943af007c174c1b504e10bc59f83db188dd
-
SHA512
cbf9895368cbbd2affead18471c6e6d511e110fa56d3ef3dd9bc63b8cfe02d2bba7fa311c55afdfa7af09c0bba4e62d77212f7ea67cd373a54bf9cb4392b643e
-
Suspicious use of NtCreateProcessExOtherParentProcess
-