General
-
Target
1652-134-0x0000000000400000-0x0000000000497000-memory.dmp
-
Size
604KB
-
MD5
0f06edb4774810478ba9a5ddc47268c7
-
SHA1
5815b4f0f9168ddab94c9ed12f5a18e203b6ef9e
-
SHA256
219d93a2afc7074882895a4e5c9deffa620fcaf71a707a651a6031d423127ab1
-
SHA512
043534aeddcf7a7ecd5d7a4f706eb59ecad182c2e2414e6139681421e6dc3dc7f9e5c821747daff56e2d1fbe76fe60fd02a0506eeedf71ea852b9189c9dece0b
-
SSDEEP
6144:E0O9FBn6pblBRJ/Xyf/STC47MSzISIQTc6TD:pO9FBnilnJn+4QScSI6
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
5e2505d8647542f05843f89ae7cd18e7
C2
http://128.140.101.125:80/
Attributes
-
user_agent
SunShineMoonLight
xor.plain
Signatures
-
Raccoon Stealer payload 1 IoCs
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1652-134-0x0000000000400000-0x0000000000497000-memory.dmp
Headers
Sections