General
-
Target
1888-30-0x0000000000400000-0x0000000000497000-memory.dmp
-
Size
604KB
-
MD5
b06943daf77a095788b1e84c5d2cdd4f
-
SHA1
e04578dacfc354276d5f2f9c2176c8707cf3c456
-
SHA256
1f0280a2111c2ebea47c3ee9c77e3ec085ec9c41fcdccdf9b321cb60710620ae
-
SHA512
75cc54446adc8da51e4c78bfe3414438123f1018fac785a9c71dca916a35f39629a66b6c52467feb1ddde2d832e309523cb0e66f03efc65c30d64e4797a36da8
-
SSDEEP
3072:qEfIr0usN5rtB+U7ITo+StjTEuFDYpcOmf/SEcjC47MSYCIyVNVU7zE3o6ok1Ua1:qyttI0PtcKlf/STC47MSzISIZTc6TD
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
6a42cfb0d3dcb7e42517699aa38c4bd1
C2
http://89.23.107.169:4000/
Attributes
-
user_agent
GeekingToTheMoon
xor.plain
Signatures
-
Raccoon Stealer payload 1 IoCs
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1888-30-0x0000000000400000-0x0000000000497000-memory.dmp
Headers
Sections