General
- Target 1712-11200-0x0000000000400000-0x0000000000425000-memory.dmp
- Size 148KB
- Sample240305-vzddfsdb98
- SHA256 3ad4a971d6f0af57341806ea151991088548bec2d9051a2f60102110f66e691e
- MD5 2995aaa4e569f96eb2307cb52d6044ee
- SHA1 c9a605436566b6e49c45c7988f487ea389cda783
- SHA512 4b6a92aa8c980df398f0670edd47dd82233d8c97f17ef7ea40ae3d65938ad9f69fa31e2dbde014fb378637c11e3308f8cb03ad5f6f1dba57bef4db2063cfb0fe
- SSDEEP 1536:GY5KCXch1xZEVQnPjUMg0XfXBOwbzR14iwelTKMTarb57b8CBm0DasBIdPKz0aex:1Xch1x0QPtfEwP/wUaR7b8CBmChIZKM
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
1712-11200-0x0000000000400000-0x0000000000425000-memory.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1712-11200-0x0000000000400000-0x0000000000425000-memory.exe
Resource
win10v2004-20240226-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
bc463b4e1d07e66361213e00312b2a5d
C2
-
http://45.15.156.178
-
http://45.15.156.177
Attributes
-
user_agent
AYAYAYAY1337
xor.plain
Targets
-
- Target 1712-11200-0x0000000000400000-0x0000000000425000-memory.dmp
- Size 148KB
- SHA256 3ad4a971d6f0af57341806ea151991088548bec2d9051a2f60102110f66e691e
- MD5 2995aaa4e569f96eb2307cb52d6044ee
- SHA1 c9a605436566b6e49c45c7988f487ea389cda783
- SHA512 4b6a92aa8c980df398f0670edd47dd82233d8c97f17ef7ea40ae3d65938ad9f69fa31e2dbde014fb378637c11e3308f8cb03ad5f6f1dba57bef4db2063cfb0fe
- SSDEEP 1536:GY5KCXch1xZEVQnPjUMg0XfXBOwbzR14iwelTKMTarb57b8CBm0DasBIdPKz0aex:1Xch1x0QPtfEwP/wUaR7b8CBmChIZKM
- MD5 SHA1 SHA512 SSDEEP
Score1/10