General

  • Target

    4828-408-0x0000000000400000-0x0000000002B7F000-memory.dmp

  • Size

    39.5MB

  • MD5

    e79488d353a7aa9acca609dd7ba39600

  • SHA1

    8a51828a557150b53d673ad7f1385603ef9bdb9a

  • SHA256

    5928cbb56764d6e0017f5b1b5cb29c59813e42a153b03152238ddaaf27a88237

  • SHA512

    70d9ad64ae9b1a3327e872a73832cb99338dce755fe35176b5801db51f20d344a334cc5414872d1d88da8b622f5112345e6afcfa2c4e40b994382731f8b380cc

  • SSDEEP

    3072:v1EMGexnG0Y18k54XZ7FsKkn1Eq7x3I4wf7SRE8ifqvgx:v1nk1g1F/knCImX+RE8qq

Malware Config

Extracted

Family

raccoon

Botnet

567d5bff28c2a18132d2f88511f07435

C2

http://116.203.167.5/

http://195.201.248.58/

rc4.plain

Signatures

Files

  • 4828-408-0x0000000000400000-0x0000000002B7F000-memory.dmp
    .exe windows x86


    Headers

    Sections