Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8ec90c805a6fa2192dd10ef64998144d71ec7df6b779a661e616ed0c5f4408a

  • Size

    512KB

  • Sample

    211020-2s3s4ahfe4

  • MD5

    05c8a85a48fddb4364bf280b05127853

  • SHA1

    66346c289f34f979ffd3d61759e68db503c5daa8

  • SHA256

    d8ec90c805a6fa2192dd10ef64998144d71ec7df6b779a661e616ed0c5f4408a

  • SHA512

    889b455d503b850d9ce56638f33ffe69171fe0803d00744d1a4aaf3a4d715d147c5ab1ce314020af6c0cc60ae95f5297e58f59194c5815f1aa614d7403152882

Score
10/10
raccoon887a0ffaca448362277f2227182491216b734133stealer

Malware Config

Extracted

Family

raccoon

Botnet

887a0ffaca448362277f2227182491216b734133

Attributes
  • url4cnc

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      d8ec90c805a6fa2192dd10ef64998144d71ec7df6b779a661e616ed0c5f4408a

    • Size

      512KB

    • MD5

      05c8a85a48fddb4364bf280b05127853

    • SHA1

      66346c289f34f979ffd3d61759e68db503c5daa8

    • SHA256

      d8ec90c805a6fa2192dd10ef64998144d71ec7df6b779a661e616ed0c5f4408a

    • SHA512

      889b455d503b850d9ce56638f33ffe69171fe0803d00744d1a4aaf3a4d715d147c5ab1ce314020af6c0cc60ae95f5297e58f59194c5815f1aa614d7403152882

    Score
    10/10
    raccoon887a0ffaca448362277f2227182491216b734133stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks