General

  • Target

    1344-63-0x0000000000400000-0x0000000000414000-memory.dmp

  • Size

    80KB

  • MD5

    b44db269abd459f1fdb5aae0f438b312

  • SHA1

    5b04296c1b20108dfd38a6c8fb0b8a97e084c595

  • SHA256

    7427690bb70f6b9ce6c51014fbd0df472e1e27f187864e5b14329a05f1d03c13

  • SHA512

    d97f98eec73884747e21ff4e81ed9a7603ef52879a5ce5eedcbd4f5922fa5b71423ff37657316f443027cba03dd4c081fdadd15ed19a154fc4c47f16fb92d42a

  • SSDEEP

    768:G3hBdh98zo8hUzAMgRt5O9hDtqCD+4yNdQiEw6ZjqZeS6R:AdMzAzjavO9uG+NNdQ4MGQR

Malware Config

Extracted

Family

raccoon

Botnet

1f95cf62df71eb84e6a269f19941ccbc

C2

http://193.106.191.146/

http://185.215.113.89/

rc4.plain

Signatures

Files

  • 1344-63-0x0000000000400000-0x0000000000414000-memory.dmp
    .exe windows x86


    Headers

    Sections