General
- Target c28d1fc19077eb26d385dd8c1fd551b7.exe
- Size 513KB
- Sample211002-qhsplaeda2
- SHA256 a94e83cce3c68f0cbb6deb71be8dedff6d7a17f82076d54b6d3ba9cedf8480f5
- MD5 c28d1fc19077eb26d385dd8c1fd551b7
- SHA1 8e2e32ee558f42b03db7266dbe09bb49b71f1781
- SHA512 7e1c8f98fadf571c57fb89acd115ba1fa0622db8abc377f478353876f9bde0c4fa55c18ad64fbbbd3200b3ffd3a6839f913ccde71b2f70e2ae64e206fce479e4
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c28d1fc19077eb26d385dd8c1fd551b7.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
c28d1fc19077eb26d385dd8c1fd551b7.exe
Resource
win10-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target c28d1fc19077eb26d385dd8c1fd551b7.exe
- Size 513KB
- SHA256 a94e83cce3c68f0cbb6deb71be8dedff6d7a17f82076d54b6d3ba9cedf8480f5
- MD5 c28d1fc19077eb26d385dd8c1fd551b7
- SHA1 8e2e32ee558f42b03db7266dbe09bb49b71f1781
- SHA512 7e1c8f98fadf571c57fb89acd115ba1fa0622db8abc377f478353876f9bde0c4fa55c18ad64fbbbd3200b3ffd3a6839f913ccde71b2f70e2ae64e206fce479e4
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.