General
-
Target
81fafd7864aff9c218af9d3f9771756b5d1140562d356a201a4e7e8195091dbf
-
Size
584KB
-
Sample
211111-zb7plshcap
-
MD5
4f5ba907fb7eded6df1f11d4f0cca37c
-
SHA1
b62e01c7c755bc5817704a94784f82af26cd6d8d
-
SHA256
81fafd7864aff9c218af9d3f9771756b5d1140562d356a201a4e7e8195091dbf
-
SHA512
1705a9e15562f72b33dcc82ec25ba20347c361dffb6b975496e985212040adc1e939e6ea1d64110c729e9fe0a26a741476451b364e13987ffd0e04e2c020d7ea
Static task
static1
Behavioral task
behavioral1
Sample
81fafd7864aff9c218af9d3f9771756b5d1140562d356a201a4e7e8195091dbf.exe
Resource
win10-en-20211104
Malware Config
Extracted
raccoon
1.8.3-hotfix
4557a7b982bafcd677193713fa5041fa32e7e61e
-
url4cnc
http://91.219.236.162/agrybirdsgamerept
http://185.163.47.176/agrybirdsgamerept
http://193.38.54.238/agrybirdsgamerept
http://74.119.192.122/agrybirdsgamerept
http://91.219.236.240/agrybirdsgamerept
Targets
-
-
Target
81fafd7864aff9c218af9d3f9771756b5d1140562d356a201a4e7e8195091dbf
-
Size
584KB
-
MD5
4f5ba907fb7eded6df1f11d4f0cca37c
-
SHA1
b62e01c7c755bc5817704a94784f82af26cd6d8d
-
SHA256
81fafd7864aff9c218af9d3f9771756b5d1140562d356a201a4e7e8195091dbf
-
SHA512
1705a9e15562f72b33dcc82ec25ba20347c361dffb6b975496e985212040adc1e939e6ea1d64110c729e9fe0a26a741476451b364e13987ffd0e04e2c020d7ea
-
Suspicious use of NtCreateProcessExOtherParentProcess
-