General

  • Target

    2212-146-0x0000000000400000-0x0000000000425000-memory.dmp

  • Size

    148KB

  • MD5

    49e8928d95aa1d7c677c67f2ef37bb31

  • SHA1

    6842901b0267d48f8a410906b15a6e92cef8e7be

  • SHA256

    d206ff3d6bfbbe12f49eacfc5c2c0b2887603e8acde161179beb6b48d79f21b5

  • SHA512

    a0c78ff6a67716c427ecf5af4cec58d28e6c28b4ed8a80b7735de46f62945f1dbe0732cf6875a8fa7c370c3a8da19c046a7e888c59f232b95636e62c65def9e2

  • SSDEEP

    1536:GY5KCXch1xZEVQnPjUMg0XfXBOwbzR14iwelTKMTarb57b8CBm0DasBIdPKz0fex:1Xch1x0QPtfEwP/wUaR7b8CBmChIZK7

Malware Config

Extracted

Family

raccoon

Botnet

fc8427198f843d72c1aa8a66db1a98f3

C2

http://91.235.234.235/

xor.plain

Signatures

Files

  • 2212-146-0x0000000000400000-0x0000000000425000-memory.dmp
    .exe windows x86


    Headers

    Sections