General

  • Target

    1448-58-0x0000000000400000-0x0000000002B7F000-memory.dmp

  • Size

    39.5MB

  • MD5

    4edd6f5aef5031215c546737fef4620f

  • SHA1

    2b1e8133eb92f17446888a294425e76ef7833df3

  • SHA256

    e6bb4043319cb7d942e52abdf3e92c68107891f35fa66a7807c32958d992be0b

  • SHA512

    3764d8a2a976a7fc21627b636841ab32724f0ffeb3f8b2aaefe9bf12e69801f31f4f9804590b8ee10528c8e4ae4e60333cab1fed989e64673b3c229de76e9d9d

  • SSDEEP

    3072:v1EMGexnG5Y18wmI/QS21O4pOPx3Vrv/L2nfCBTijZ+sjPp:v1nt14ItN4pOPxFLfTy+oh

Malware Config

Extracted

Family

raccoon

Botnet

567d5bff28c2a18132d2f88511f07435

C2

http://116.203.167.5/

http://195.201.248.58/

rc4.plain

Signatures

Files

  • 1448-58-0x0000000000400000-0x0000000002B7F000-memory.dmp
    .exe windows x86


    Headers

    Sections