Overview

overview

10

Static

static

10

1568-60-0x...ry.exe

windows7-x64

1568-60-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1568-60-0x0000000000400000-0x0000000001DFB000-memory.dmp

  • Size

    26.0MB

  • MD5

    aabc81f527b94704ecd301f761b11d67

  • SHA1

    473e5dd8d9225bc4189300b27acd3a7e1df1bbc5

  • SHA256

    e553403319afa0fe1acd6930559e3ceafcb3df5fb35d2c8b2b9a3c212eb6c453

  • SHA512

    9408ba9e1733982a2a7c1497d6b87023f7733c7ad297e7dd35c315ae60e4a68bac9c002937474f408204e10d3f5f34f1df1d0636327e586780cf979cd8160cf7

  • SSDEEP

    393216:topwApdaxmMwW1ax8NUgudzRZCo05bUbMEtLjwQOhwLXacTOaZvDaY9j2/cVzxg:G3d2kW1aXgudzU5bmvwT8qcmY96sxg

Score
10/10
3b164269f2adf6743049d522e1af1845raccoon

Malware Config

Extracted

Family

raccoon

Botnet

3b164269f2adf6743049d522e1af1845

C2

http://83.217.11.36/

http://83.217.11.25/
xor.plain

Signatures

  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1568-60-0x0000000000400000-0x0000000001DFB000-memory.dmp
    .exe windows x86


    Headers

    Sections