General

  • Target

    1700-141-0x0000000000400000-0x0000000000F2D000-memory.dmp

  • Size

    11.2MB

  • MD5

    1bd1b9016706a7fc2e76f2c49a7decc7

  • SHA1

    625b7e7a746727b6c55f504e951bc78bb87b0745

  • SHA256

    366129b789fdc0de1ccc0a9ddf4e0e833a65852572deb97f13e1a279db9ebe4a

  • SHA512

    bda63850bed2b3b201d1ab06d67e9578150c6fdd9c45449b62649f54c0a39d0ef32233d762c27575a8672a77be28213b191033d253d47736be840dc3876a06db

  • SSDEEP

    196608:zU9hxqJ+ymOuBASGkxdlOOjteWkBkoGNu/6bIN6aEIqGCG2EuhdheNKAcqvW:zGqJ+8uBq2cGoOuESxEFzhdOKFqvW

Malware Config

Extracted

Family

raccoon

Botnet

8fb7b851641d456f39570978e99f780e

C2

http://45.15.156.239/

rc4.plain

Signatures

Files

  • 1700-141-0x0000000000400000-0x0000000000F2D000-memory.dmp
    .exe windows x86


    Headers

    Sections