General
-
Target
14fcca6c418783e3684d7deabb433e297fd475d1fe530e068dac6f5227c6b5d2
-
Size
471KB
-
Sample
211110-pp1hcaebcr
-
MD5
01630d0584f498f362dd88bc77f1e1fa
-
SHA1
a9815f4269f7768835bbeff0daca5b01cceb9904
-
SHA256
14fcca6c418783e3684d7deabb433e297fd475d1fe530e068dac6f5227c6b5d2
-
SHA512
7519fb71d94e10308d18138c554f74759b8d28bc5334581436dc6f0c0ffa878f093dbad5653ada778a165f511dd7fad138cf34b91947d1bbfbde399122fbb9b8
Static task
static1
Behavioral task
behavioral1
Sample
14fcca6c418783e3684d7deabb433e297fd475d1fe530e068dac6f5227c6b5d2.exe
Resource
win10-en-20211014
Malware Config
Extracted
raccoon
1.8.3-hotfix
fcdc156d3872c18d25e3ee45499599b45e492a67
-
url4cnc
http://178.23.190.57/rino115sipsip
http://91.219.236.162/rino115sipsip
http://185.163.47.176/rino115sipsip
http://193.38.54.238/rino115sipsip
http://74.119.192.122/rino115sipsip
http://91.219.236.240/rino115sipsip
https://t.me/rino115sipsip
Targets
-
-
Target
14fcca6c418783e3684d7deabb433e297fd475d1fe530e068dac6f5227c6b5d2
-
Size
471KB
-
MD5
01630d0584f498f362dd88bc77f1e1fa
-
SHA1
a9815f4269f7768835bbeff0daca5b01cceb9904
-
SHA256
14fcca6c418783e3684d7deabb433e297fd475d1fe530e068dac6f5227c6b5d2
-
SHA512
7519fb71d94e10308d18138c554f74759b8d28bc5334581436dc6f0c0ffa878f093dbad5653ada778a165f511dd7fad138cf34b91947d1bbfbde399122fbb9b8
-
Suspicious use of NtCreateProcessExOtherParentProcess
-