General
-
Target
1596-21-0x0000000000400000-0x000000000085E000-memory.dmp
-
Size
4.4MB
-
MD5
9f4d60f9ccecc0b0a91cbe0baac025b0
-
SHA1
07e9c3cc3c6e32a79f8fecda5cc5db5f1e33b537
-
SHA256
ac5a6dd1132210c65dfb8d5e61e810ca92cc7e958780c7d294ae70868ab6e073
-
SHA512
dddbedac59d9d4f8163072f8070cedaf4a41b23b2645c5d59d6845ecc45fae36a24facdccb73c702fb329ac8210fef0a6de93fedbf41421bc2a2b454ace06a2f
-
SSDEEP
3072:9PI6GWpeVsXCLMrxbQlpuFqHARmb4pFVqmkStswH9pQURRa/pHUZ5OeTC8L:9P8WwesMrJQlpm5kmH39pQU6BHU3T
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
02715ba03fc9d768ba977c72db990ef6
C2
http://193.233.132.30:80/
Attributes
-
user_agent
MrBidenNeverKnow
xor.plain
Signatures
-
Raccoon Stealer V2 payload 1 IoCs
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1596-21-0x0000000000400000-0x000000000085E000-memory.dmp
Headers
Sections