General
-
Target
c1258ce5cdc59be3cf83f8de7a42e899.exe
-
Size
541KB
-
Sample
210928-f8wttsafe2
-
MD5
c1258ce5cdc59be3cf83f8de7a42e899
-
SHA1
7097454adeef597a9f06839b68be559827d1ed42
-
SHA256
51883d0e9ac65bb1850ce0f0a668df2a03e16bb9500be5a6ca54f8ff02154506
-
SHA512
3c6d59be6cbbf071cd78251ce89eacba790878b6a0cdf254a4cf91065cd413f8f6aca53ad6fcd4aa53ddc00905f4b3b8b4e6c65f8fb29715578850b5e739c9e2
Static task
static1
Behavioral task
behavioral1
Sample
c1258ce5cdc59be3cf83f8de7a42e899.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
c1258ce5cdc59be3cf83f8de7a42e899.exe
Resource
win10-en-20210920
Malware Config
Extracted
raccoon
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
-
url4cnc
https://t.me/agrybirdsgamerept
Targets
-
-
Target
c1258ce5cdc59be3cf83f8de7a42e899.exe
-
Size
541KB
-
MD5
c1258ce5cdc59be3cf83f8de7a42e899
-
SHA1
7097454adeef597a9f06839b68be559827d1ed42
-
SHA256
51883d0e9ac65bb1850ce0f0a668df2a03e16bb9500be5a6ca54f8ff02154506
-
SHA512
3c6d59be6cbbf071cd78251ce89eacba790878b6a0cdf254a4cf91065cd413f8f6aca53ad6fcd4aa53ddc00905f4b3b8b4e6c65f8fb29715578850b5e739c9e2
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-