Overview

overview

10

Static

static

10

1276-57-0x...ry.exe

windows7-x64

1276-57-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1276-57-0x0000000000400000-0x0000000001707000-memory.dmp

  • Size

    19.0MB

  • MD5

    0c0c6822a93f9a89b6a3cb7d682784ef

  • SHA1

    c8f2fd045f276a8cfb3f7f56f6accaa3da9fdeec

  • SHA256

    75ad50e645d939cdc2b676a47ec221f7b228b1edf3873ea06d32d50372ccea35

  • SHA512

    ff39e3eca897337be2bd16d901cec37cbb3debc2ec848eb4a65039b280bd9aa69ff878e6b317eb15f6cd92943a53a9dbb8ea8acf1c1ffb706f70173b265a4b17

  • SSDEEP

    393216:UPiJEals3uT0NsChZ3RbqnEEtqn0aj0Qv2FFOxcN1A1JwoX6:FJEals3uVChbmq5IEdWoX

Score
10/10
36e893f2729e70c8ab1b5a71dc971cb4raccoon

Malware Config

Extracted

Family

raccoon

Botnet

36e893f2729e70c8ab1b5a71dc971cb4

C2

http://217.196.96.11/

xor.plain

Signatures

  • Raccoon family
    raccoon
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1276-57-0x0000000000400000-0x0000000001707000-memory.dmp
    .exe windows x86


    Headers

    Sections