General

  • Target

    1820-55-0x0000000000400000-0x0000000000DCA000-memory.dmp

  • Size

    9.8MB

  • MD5

    6b26288c731c4393a553a0d2dd8eeddd

  • SHA1

    678d0bd8ae46f215416e72c37b1426421b49abec

  • SHA256

    7888a2d89facb465f825e9bd6877188b0aa8fa7b9f83b1a5d82ebf5651ea679a

  • SHA512

    3e6aba7413b6a327a61d203c65090c79843bc6b9f940c68afa468c85c7b6c5d1b922fdede5398c89f74336c3f84521b17192b8e2bd4ff0ca749aff75429d7d64

  • SSDEEP

    196608:kvzAXPlfffpIYpravc0cyK9r5mvf4qJYpx1Okie:kvzue6aIyK905KpxY

Malware Config

Extracted

Family

raccoon

Botnet

8f4e4706e9b4e3a904862901d32e2123

C2

http://78.159.103.196

http://78.159.103.214/

rc4.plain

Signatures

Files

  • 1820-55-0x0000000000400000-0x0000000000DCA000-memory.dmp
    .exe windows x86


    Headers

    Sections