General

  • Target

    1848-167-0x0000000000400000-0x000000000041D000-memory.dmp

  • Size

    116KB

  • MD5

    91c0d5d6776ad2df09f7ad32572d863d

  • SHA1

    969c812cb2b7cc5f38a6fc20f1ecbf84f62f718f

  • SHA256

    f3a096e2ee793c7dc2d1a571ea5d3bb071e7c931d150eda07e2211f1fec44576

  • SHA512

    ed59294362984036ebeaf6dd6e78ef209049089f4165c8cc24b6b0f408b1155437e3e615eeba4bd98eb9e65080632ae782964618447fd2ab228f9623138fd22b

  • SSDEEP

    1536:Bpaiq0I2XvL/5kVvpyITHAOEH8pIZ+msXvsfJre8oJ1C7uj9m:BpaikE/5SppIZ+m2sfJrebJF

Malware Config

Extracted

Family

raccoon

Botnet

8fb7b851641d456f39570978e99f780e

C2

http://45.15.156.239/

rc4.plain

Signatures

Files

  • 1848-167-0x0000000000400000-0x000000000041D000-memory.dmp
    .exe windows x86


    Headers

    Sections