General
- Target 11d684cd5cd5e103aa937dd1688d6ed5.exe
- Size 571KB
- Sample211207-ys91maffe9
- SHA256 4d6db76398fa37523b40e69ac3ae9dea6d04c3c51cce4c0a72e5d312d14e5017
- MD5 11d684cd5cd5e103aa937dd1688d6ed5
- SHA1 11460e16e261a645f860a8b7d0947b66a1a092b6
- SHA512 65b43995ac05382e5ab7c3b65036f459f2c0380fd2158943b161d59d2aba5e61f162948a0b869a05f9687daf178762ec7b1f74b451d87fb3259b870a10d32e25
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
11d684cd5cd5e103aa937dd1688d6ed5.exe
Resource
win7-en-20211014
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
11d684cd5cd5e103aa937dd1688d6ed5.exe
Resource
win10-en-20211104
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.3-hotfix
Botnet
-
fd4f23250443a724a3d1548e6ab07c481dfc2814
Attributes
-
url4cnc
http://91.219.236.27/duglassa1
http://94.158.245.167/duglassa1
http://185.163.204.216/duglassa1
http://185.225.19.238/duglassa1
http://185.163.204.218/duglassa1
https://t.me/duglassa1
rc4.plain
rc4.plain
Targets
-
- Target 11d684cd5cd5e103aa937dd1688d6ed5.exe
- Size 571KB
- SHA256 4d6db76398fa37523b40e69ac3ae9dea6d04c3c51cce4c0a72e5d312d14e5017
- MD5 11d684cd5cd5e103aa937dd1688d6ed5
- SHA1 11460e16e261a645f860a8b7d0947b66a1a092b6
- SHA512 65b43995ac05382e5ab7c3b65036f459f2c0380fd2158943b161d59d2aba5e61f162948a0b869a05f9687daf178762ec7b1f74b451d87fb3259b870a10d32e25
- MD5 SHA1 SHA512