General

  • Target

    4628-141-0x0000000000400000-0x0000000000F2D000-memory.dmp

  • Size

    11.2MB

  • MD5

    d1a8774e0895b53052eaf1aa48d16357

  • SHA1

    a167ff58e4cf25246dca190841f4df57d5f34535

  • SHA256

    86909063f193c31375bbbc608819d17a12e7d8ab72ca3c04ec032c6c250248f2

  • SHA512

    4976110e23dd2cb148a479be22b6de754d3f973d81b8dd3971f9f74340c9ec5e76dd848c35735958ba3727072f671f837a7386089e379f2e58cdb54d69713119

  • SSDEEP

    196608:aO9hxqJ+ymOuBASGkxdlOOjteUkBkoGNu/6bIN6aEIqGCG2EuhdheNKAcqvW:agqJ+8uBq2mGoOuESxEFzhdOKFqvW

Malware Config

Extracted

Family

raccoon

Botnet

8fb7b851641d456f39570978e99f780e

C2

http://45.15.156.239/

rc4.plain

Signatures

Files

  • 4628-141-0x0000000000400000-0x0000000000F2D000-memory.dmp
    .exe windows x86


    Headers

    Sections