General

  • Target

    1356-78-0x0000000000400000-0x0000000001C73000-memory.dmp

  • Size

    24.4MB

  • MD5

    b3af82715275d19b261c4c88d8ba23bc

  • SHA1

    8fa643290d678509f16f3a090af4441cd66eef86

  • SHA256

    bcdfe66975febed3eafa9ddf17b7a21d31dd8194651b6281c9a91b025908f934

  • SHA512

    1de59668bfba94216e5a38ac00edd49d86ceb34d073244a78739b3e3cb475b9b75296cb065271b0a14fea1f0b0b7d8b711f51c4b76430ec03998dbf8ec6f87ea

  • SSDEEP

    393216:noRUIz5MYCyR3D2MP4E7nGWbizLLKDvOG1nw6bdySv8RhqVQDT1x5L6hIvtDojHq:nq5tj3DrwELGWbWt6bBvczDd6KVDo+

Malware Config

Extracted

Family

raccoon

Botnet

f26f614d4c0bc2bcd6601785661fb5cf

C2

http://45.9.74.170

http://77.73.134.43

rc4.plain

Signatures

Files

  • 1356-78-0x0000000000400000-0x0000000001C73000-memory.dmp
    .exe windows x86


    Headers

    Sections