Overview

overview

10

Static

static

10

1412-63-0x...ry.exe

windows7-x64

1412-63-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1412-63-0x0000000000400000-0x0000000000425000-memory.dmp

  • Size

    148KB

  • MD5

    eb5c051c961685dd5064be95291d92a3

  • SHA1

    4e87474c6880a35fdd6e5d6277ad743de52e3711

  • SHA256

    3654ddea2f98121e30f41e1a22d71cb2039db05e8bf747b31d95448c0dcd101c

  • SHA512

    2b43adad51caa6d44f422178fbbd74bb07918a4f53f3a15f50ffef44884d4bd9fc53de036dff0af0349e4c7b3d57708a507dd372d03282a3ea12c039a06cc854

  • SSDEEP

    1536:GY5KCXch1xZEVQnPjUMg0XfXBOwbzR14iwelTKMTarb57b8CBm0DasBIdPKz0fex:1Xch1x0QPtfEwP/wUaR7b8CBmChIZK7

Score
10/10
ea23912cd46ff68d5e144ebb6f4120adraccoon

Malware Config

Extracted

Family

raccoon

Botnet

ea23912cd46ff68d5e144ebb6f4120ad

C2

http://94.142.138.133

xor.plain

Signatures

  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1412-63-0x0000000000400000-0x0000000000425000-memory.dmp
    .exe windows x86


    Headers

    Sections