General

  • Target

    1636-56-0x0000000000400000-0x0000000000458000-memory.dmp

  • Size

    352KB

  • MD5

    28c2dac00c728518cd865e584529410c

  • SHA1

    43fce380eb70844233b1653d2cf1eef4bbdb9923

  • SHA256

    9fae45917fff37ad72414bd2ba76ff1a0ca79e22799c69179ea323dce1719b3b

  • SHA512

    47f283c6a8f0689f4a6473133d739e18e5c7350dd3e0707b38301da1f120b4eee5e148b8a4cef0b0ed39c2a0c6987574affd8380b468179d917698b1c2ddee45

  • SSDEEP

    6144:i/UMLsKBmN+++moV0I0isvzpQ6ijLxQFiaI:irsK8N+KohxqzpQ6ijqF

Malware Config

Extracted

Family

raccoon

Botnet

4d2589ea58ba4e2af895b84b686464b1

C2

http://88.119.170.115/

http://213.252.247.28/

http://213.252.247.42/

rc4.plain

Signatures

Files

  • 1636-56-0x0000000000400000-0x0000000000458000-memory.dmp
    .exe windows x86


    Headers

    Sections