General

  • Target

    1948-519-0x0000000000400000-0x0000000000425000-memory.dmp

  • Size

    148KB

  • MD5

    3ffc69ec7f922d9045aeddddf337f7ea

  • SHA1

    8c8b23f8a6f3eae1c97763a632688d10ecadfc6e

  • SHA256

    7c5943ffc0be7de2cd77f3ef02b2921df94f9d966e2d95f2ec938673cacb59fc

  • SHA512

    47ef48818803b480cb7d55eb389d4c01d67ddd96e29f0cdabb2a91e20f236055f150007b74641444acd0bb55d8ea2b097aba2d26c85fd533bdce078cfb3c2d09

  • SSDEEP

    1536:GY5KCXch1xZEVQnPjUMg0XfXBOwbzR14iwelTKMTarb57b8CBm0DasBIdPKz0sex:1Xch1x0QPtfEwP/wUaR7b8CBmChIZKi

Malware Config

Extracted

Family

raccoon

Botnet

fc8427198f843d72c1aa8a66db1a98f3

C2

http://91.235.234.235/

xor.plain

Signatures

Files

  • 1948-519-0x0000000000400000-0x0000000000425000-memory.dmp
    .exe windows x86


    Headers

    Sections