General
- Target 5a7465b6c29dfe3bdb462fcf2eab23c1.exe
- Size 510KB
- Sample211003-db677aehe8
- SHA256 9c1bd729a791c52aef604e683c45cecffb91b1f397055e2adf10ca78c969c2a6
- MD5 5a7465b6c29dfe3bdb462fcf2eab23c1
- SHA1 890100edd35632c3c6c30b64b2a25d1e292c7d78
- SHA512 043d8e82473a372d56e32ee90a4b472c7dc62c1733226225cb988131c211b987644d2a6cc3ad72c6584a7fdedfe3b54116482464c7878c82f314159da9cf23fd
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
5a7465b6c29dfe3bdb462fcf2eab23c1.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5a7465b6c29dfe3bdb462fcf2eab23c1.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target 5a7465b6c29dfe3bdb462fcf2eab23c1.exe
- Size 510KB
- SHA256 9c1bd729a791c52aef604e683c45cecffb91b1f397055e2adf10ca78c969c2a6
- MD5 5a7465b6c29dfe3bdb462fcf2eab23c1
- SHA1 890100edd35632c3c6c30b64b2a25d1e292c7d78
- SHA512 043d8e82473a372d56e32ee90a4b472c7dc62c1733226225cb988131c211b987644d2a6cc3ad72c6584a7fdedfe3b54116482464c7878c82f314159da9cf23fd
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.