General

  • Target

    1488-134-0x0000000000400000-0x00000000007EE000-memory.dmp

  • Size

    3.9MB

  • MD5

    f594d30ad3baf62b23d26a760e159e4a

  • SHA1

    5f9fcb0a08b6bd117c725c5b0ebb97a63db2e9c6

  • SHA256

    3f6a31e20031b771b13990284ba4490489dc6a112a3b192aeab3ce9ce5db3c68

  • SHA512

    5c158667658c29e8397a247a24a4708c6c80e41b5b6a0bd5e5378eafe5bfd307e66a9c8b024a65d15556fcd708ce5fd045fa82027dd0d4bf87307ecf0a6ccd97

  • SSDEEP

    6144:v1nn1oR0t/6eQm+Q2EScZAtZeD1NTph7bnxHE6f4:tnn+R8/RQm+QPScZh1797FE6

Malware Config

Extracted

Family

raccoon

Botnet

567d5bff28c2a18132d2f88511f07435

C2

http://116.203.167.5/

http://195.201.248.58/

rc4.plain

Signatures

Files

  • 1488-134-0x0000000000400000-0x00000000007EE000-memory.dmp
    .exe windows x86


    Headers

    Sections