General

  • Target

    1192-57-0x0000000000400000-0x0000000002C39000-memory.dmp

  • Size

    40.2MB

  • MD5

    ec37effe5d678e264191f18d66d3a3b3

  • SHA1

    b923ff18658a5fe1fd583b6c50c5d6baffd1e816

  • SHA256

    3ab38a0c7d24b76708e80da62056cead804acf3cad26bdffe1b260835e6d1815

  • SHA512

    052b77fa6629b3dcb4759ebfbd941f0ccd59d2d059fbaf2864f2204a22fae731d73cbcb721597bd60cd31ede40af882a9d45b6f860cebef8011bffc656427b36

  • SSDEEP

    3072:j1EcfBUDZi0bK8P55GI4Do9tzxHm8y9C9dkndrTbPNMVQDa64zUT:FmWW3dxG8y9XNH2aa6b

Malware Config

Extracted

Family

raccoon

Botnet

dde3f69d00a438843e8c5509eb29534e

C2

http://95.141.41.13/

rc4.plain

Signatures

Files

  • 1192-57-0x0000000000400000-0x0000000002C39000-memory.dmp
    .exe windows x86


    Headers

    Sections