General
- Target 04d100e41d3293bf444651a39dc4e7e9
- Size 515KB
- Sample211207-ymjlgsffb2
- SHA256 a0877c88f33ff8f10eb996d99bfecfc8fce5ab4d78d9e86574c63d13a275cfd6
- MD5 04d100e41d3293bf444651a39dc4e7e9
- SHA1 2e9070a7c7e8e92b6a21170165628ebee2220a63
- SHA512 e93c68e30cb57070e0d1064d217555ea60663353a8c756bd79a66765cd02be24deef7d84cd2639a11742a6aea007fb0801d83265d53d28f90ee0f78846293080
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
04d100e41d3293bf444651a39dc4e7e9.exe
Resource
win7-en-20211104
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
04d100e41d3293bf444651a39dc4e7e9.exe
Resource
win10-en-20211104
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.3-hotfix
Botnet
-
fd4f23250443a724a3d1548e6ab07c481dfc2814
Attributes
-
url4cnc
http://91.219.236.27/duglassa1
http://94.158.245.167/duglassa1
http://185.163.204.216/duglassa1
http://185.225.19.238/duglassa1
http://185.163.204.218/duglassa1
https://t.me/duglassa1
rc4.plain
rc4.plain
Targets
-
- Target 04d100e41d3293bf444651a39dc4e7e9
- Size 515KB
- SHA256 a0877c88f33ff8f10eb996d99bfecfc8fce5ab4d78d9e86574c63d13a275cfd6
- MD5 04d100e41d3293bf444651a39dc4e7e9
- SHA1 2e9070a7c7e8e92b6a21170165628ebee2220a63
- SHA512 e93c68e30cb57070e0d1064d217555ea60663353a8c756bd79a66765cd02be24deef7d84cd2639a11742a6aea007fb0801d83265d53d28f90ee0f78846293080
- MD5 SHA1 SHA512