General

  • Target

    158948-166-0x0000000000190000-0x00000000001A4000-memory.dmp

  • Size

    80KB

  • MD5

    4c3c7276063a80e2c91a79beb531767f

  • SHA1

    db463bb11a0c74f3f09a111dbafd18e0af357425

  • SHA256

    85f6ef6351ddd48aaf2e08b7a79b91fd296f79d2fa8a3265713af83b34564ab1

  • SHA512

    db0658e1bf4d0fde6bc9bff1c486f64579f471c76212c367d26bf0e3da7d28982b8a619519812593672c97859f63e1281265726322dcd9144610cbc65a14c67f

  • SSDEEP

    768:HesnGlUm64QSP1rDsmPq6LfpbNGWfkZEDMLZ2ZeS6RRUhS:+sGltoSPpYmRLfpbN7fbiiQRe

Malware Config

Extracted

Family

raccoon

Botnet

1a17d9aed7a239440deb75d7a177f406

C2

http://193.38.55.180/

rc4.plain

Signatures

Files

  • 158948-166-0x0000000000190000-0x00000000001A4000-memory.dmp
    .exe windows x86


    Headers

    Sections