General
-
Target
e4f1301dcc5ca2ec90eecd1a77216ee75533a261c7a81a94ac1a2f8bf717f115
-
Size
288KB
-
Sample
220912-kl4y5sgfeq
-
MD5
213a2a1ace91929dff5caab768187abd
-
SHA1
61513b34971d94874db3b5186cc896a40b96621f
-
SHA256
e4f1301dcc5ca2ec90eecd1a77216ee75533a261c7a81a94ac1a2f8bf717f115
-
SHA512
ad55d820fcb9edeab5fd3835f4f172ac0291d39b579347567078bd5b088a69331fb27cbf67fb2ce61f1ade23407749a7a89d9afc0f74670c19cd8660eb6c4096
-
SSDEEP
6144:0Wbgzse3Nv3+9TFrhuw/O000jQ6REg2UvNM/2Y:03r3NGpFrhuw/O6sAEV2
Static task
static1
Behavioral task
behavioral1
Sample
e4f1301dcc5ca2ec90eecd1a77216ee75533a261c7a81a94ac1a2f8bf717f115.exe
Resource
win10-20220812-en
Malware Config
Extracted
raccoon
567d5bff28c2a18132d2f88511f07435
http://116.203.167.5/
http://195.201.248.58/
Targets
-
-
Target
e4f1301dcc5ca2ec90eecd1a77216ee75533a261c7a81a94ac1a2f8bf717f115
-
Size
288KB
-
MD5
213a2a1ace91929dff5caab768187abd
-
SHA1
61513b34971d94874db3b5186cc896a40b96621f
-
SHA256
e4f1301dcc5ca2ec90eecd1a77216ee75533a261c7a81a94ac1a2f8bf717f115
-
SHA512
ad55d820fcb9edeab5fd3835f4f172ac0291d39b579347567078bd5b088a69331fb27cbf67fb2ce61f1ade23407749a7a89d9afc0f74670c19cd8660eb6c4096
-
SSDEEP
6144:0Wbgzse3Nv3+9TFrhuw/O000jQ6REg2UvNM/2Y:03r3NGpFrhuw/O6sAEV2
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-