General
- Target f7d0e8e49b8ca904ce007c32fc735d9e.exe
- Size 492KB
- Sample210304-e6gl54fs5s
- SHA256 0f194879fadd2d29f30dafe3e5caeac2dd69bf725a14853ebffde46a5cf170a4
- MD5 f7d0e8e49b8ca904ce007c32fc735d9e
- SHA1 882cd94dbc5a8ed68e5caed39792def44d225635
- SHA512 f4207c27c412234668270258a3469807f63606bfadfbf3005a3fb002a5bff00de5f77fd9f7a06899040cc560909b25defc1e857cc1dd1c8ba1d9d82b083ef2d6
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
f7d0e8e49b8ca904ce007c32fc735d9e.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
f7d0e8e49b8ca904ce007c32fc735d9e.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
563129eb2a69de0d6dd4671019520d08f6eb4830
Attributes
-
url4cnc
https://telete.in/bItalianoespanol
rc4.plain
rc4.plain
Targets
-
- Target f7d0e8e49b8ca904ce007c32fc735d9e.exe
- Size 492KB
- SHA256 0f194879fadd2d29f30dafe3e5caeac2dd69bf725a14853ebffde46a5cf170a4
- MD5 f7d0e8e49b8ca904ce007c32fc735d9e
- SHA1 882cd94dbc5a8ed68e5caed39792def44d225635
- SHA512 f4207c27c412234668270258a3469807f63606bfadfbf3005a3fb002a5bff00de5f77fd9f7a06899040cc560909b25defc1e857cc1dd1c8ba1d9d82b083ef2d6
- MD5 SHA1 SHA512
-
Loads dropped DLL
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.