General
-
Target
ccf112323b8c651e1d7b9abd750d0ab7f42ae46928db2f0de42feae6c39878a3
-
Size
476KB
-
Sample
211110-xnmtvsaae6
-
MD5
c24735492bdfd39482774cebc178675c
-
SHA1
f58e1e1632f56309f5120653915a313cbcd3871f
-
SHA256
ccf112323b8c651e1d7b9abd750d0ab7f42ae46928db2f0de42feae6c39878a3
-
SHA512
d64afafc8db967941563891b8fdf6486092be7d54119c926feb2c9e089f9a4c76d0add81213d08a6f75eea1142507a78824d37eb7339f25e0d55afe8bc478e66
Static task
static1
Behavioral task
behavioral1
Sample
ccf112323b8c651e1d7b9abd750d0ab7f42ae46928db2f0de42feae6c39878a3.exe
Resource
win10-en-20211014
Malware Config
Extracted
raccoon
1.8.3-hotfix
fcdc156d3872c18d25e3ee45499599b45e492a67
-
url4cnc
http://178.23.190.57/rino115sipsip
http://91.219.236.162/rino115sipsip
http://185.163.47.176/rino115sipsip
http://193.38.54.238/rino115sipsip
http://74.119.192.122/rino115sipsip
http://91.219.236.240/rino115sipsip
https://t.me/rino115sipsip
Targets
-
-
Target
ccf112323b8c651e1d7b9abd750d0ab7f42ae46928db2f0de42feae6c39878a3
-
Size
476KB
-
MD5
c24735492bdfd39482774cebc178675c
-
SHA1
f58e1e1632f56309f5120653915a313cbcd3871f
-
SHA256
ccf112323b8c651e1d7b9abd750d0ab7f42ae46928db2f0de42feae6c39878a3
-
SHA512
d64afafc8db967941563891b8fdf6486092be7d54119c926feb2c9e089f9a4c76d0add81213d08a6f75eea1142507a78824d37eb7339f25e0d55afe8bc478e66
-
Suspicious use of NtCreateProcessExOtherParentProcess
-