General

  • Target

    1444-54-0x0000000000400000-0x0000000000D84000-memory.dmp

  • Size

    9.5MB

  • MD5

    5f8e32531c6f5c5172f9b92469d3a766

  • SHA1

    a5f6db028303bebb3d6eea7061bf9b29bab3a338

  • SHA256

    ddf39d79e92eeea4e7109fba4c6298a270b78857d124ebea35d637bcf2edc61a

  • SHA512

    ce1735f3be9c3a969a87c836f5207a94c1db023a83b8aabbd2d0f5b91570e1b8868e81e903f49bb12da2bf3a8a25445a6fcc013e348119173c05975f4eccb1e3

  • SSDEEP

    196608:2yry+I6LR7fapR0tiPlIw2gCKYMZbocA4xKW2Q61OlRkn3BPT9qKW4ONlk1zA2ik:2yG0700tiPCwGKjbocA4oPQ61MRkRPDj

Malware Config

Extracted

Family

raccoon

Botnet

573c48a8e051f58a57dca1544700413a

C2

http://88.119.169.55/

rc4.plain

Signatures

Files

  • 1444-54-0x0000000000400000-0x0000000000D84000-memory.dmp
    .exe windows x86


    Headers

    Sections