Overview

overview

10

Static

static

10

2036-58-0x...ry.exe

windows7-x64

2036-58-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2036-58-0x0000000000400000-0x0000000000B16000-memory.dmp

  • Size

    7.1MB

  • MD5

    acdaf89f09cda9ae1ea9ef68da40ed38

  • SHA1

    8707128a204dd4de2547623a0e4cfed3b0912330

  • SHA256

    9a83055ed512dc874f47f8ca981fc4a077db5b3997b8d3d01985003a43957fb1

  • SHA512

    ace9972a169fd1fcc65ee4f6ba1cd4087538b0aafb9f418f23523eb2856b70b9eb1b315d27b00fde3cd95fec9e37401ee86a7c4025c9879df62edb353306e6ee

  • SSDEEP

    196608:Z5k5koQE/8ABg3TA3OWl7p6j7qA5rU8sGk:Z5EkotBg3qOWtp6Hq2O

Score
10/10
13718a923845c0cdab8ce45c585b8d63raccoon

Malware Config

Extracted

Family

raccoon

Botnet

13718a923845c0cdab8ce45c585b8d63

C2

http://94.142.138.175/

xor.plain

Signatures

  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2036-58-0x0000000000400000-0x0000000000B16000-memory.dmp
    .exe windows x86


    Headers

    Sections