General
- Target 797741b3321e173692c18ea7e9e8f2da.exe
- Size 513KB
- Sample211002-st7c8sedd8
- SHA256 e5e4a3f0eb7248006f1421baf86bd12b8da7d2c560d0404ca1b2a11bb8de38ce
- MD5 797741b3321e173692c18ea7e9e8f2da
- SHA1 85c10278d8ae4373bc81a8739701cb36896ba422
- SHA512 92cc082947892725bdf114997de08761a98e7190e4e483c7eaf63ac443374bdba0e8eb35257094494b1c6a0d0496abd5056d1f5c2ba929282d689b32dcfa98cb
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
797741b3321e173692c18ea7e9e8f2da.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
797741b3321e173692c18ea7e9e8f2da.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target 797741b3321e173692c18ea7e9e8f2da.exe
- Size 513KB
- SHA256 e5e4a3f0eb7248006f1421baf86bd12b8da7d2c560d0404ca1b2a11bb8de38ce
- MD5 797741b3321e173692c18ea7e9e8f2da
- SHA1 85c10278d8ae4373bc81a8739701cb36896ba422
- SHA512 92cc082947892725bdf114997de08761a98e7190e4e483c7eaf63ac443374bdba0e8eb35257094494b1c6a0d0496abd5056d1f5c2ba929282d689b32dcfa98cb
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.