General

  • Target

    1504-57-0x0000000000400000-0x0000000001527000-memory.dmp

  • Size

    17.2MB

  • MD5

    cac0af27198109a03a332a17c9292b9a

  • SHA1

    f1c4226fe337d9881fb3e39bc2f831aa1fbf4368

  • SHA256

    a8b6762ab6469b4da910e0516986570b9d827f2a05efac2ce5b2a52534371f24

  • SHA512

    ac8f49a19b765be16c319acf8b98c47ff0750342410d8d09d26ae7671d80fba2e6e2ae3d44b8c1c1b6def6be7a77f59cab2fe06e0921a71fde2c7427b45820e2

  • SSDEEP

    393216:fSUz4/+VDIWaVeOBPhNGVbuGgy+uzCo/mqSxgCf8eDld:5USvaVXXiCGFHmHxg9eD

Malware Config

Extracted

Family

raccoon

Botnet

e8079d22e46847399691305c53f6386c

C2

http://45.9.74.170

http://77.73.134.43

rc4.plain

Signatures

Files

  • 1504-57-0x0000000000400000-0x0000000001527000-memory.dmp
    .exe windows x86


    Headers

    Sections