General
-
Target
1476-56-0x0000000000400000-0x000000000047E000-memory.dmp
-
Size
504KB
-
MD5
102f34afeaaa3622f30810ff71d66bfa
-
SHA1
75f46f30dc6647bdd40eba14a0a23af42885e3ae
-
SHA256
5917e86cd9c591f4bdcf6367661a725d0f6b2229d7255650145a6cfe5470cda1
-
SHA512
d8ba9ff8625376e0b3be97ff574ba8a469ac89518f151a6967e1c5f38d9270c0be9ad7b0d99598823e1bebdd358995fb213e6a6e90ce1b9de9ab170f60d19149
-
SSDEEP
3072:YyCf1nX/DBQ67rlMQ5kgN0LucGuW0d3504K/:Y19X/d77q5gN0CjRw04K
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
6bb5fbdb7121bc7ea628330bef79c129
C2
http://5.78.78.150:8088/
Attributes
-
user_agent
DuckTales
xor.plain
Signatures
-
Raccoon Stealer V2 payload 1 IoCs
-
Raccoon family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1476-56-0x0000000000400000-0x000000000047E000-memory.dmp
Headers
Sections