Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5522c3d773e1fa20fe6ecd690deb736f352595fa18f682aa0378f76a99459820

  • Size

    511KB

  • Sample

    211021-cfywyahgd3

  • MD5

    9840d8ffae033ce713b8e82b78dead01

  • SHA1

    5063692c873e213ff0a5ae21ecb47b1d999d01c3

  • SHA256

    5522c3d773e1fa20fe6ecd690deb736f352595fa18f682aa0378f76a99459820

  • SHA512

    e5b2655f48954e762e3af2424140b4a405a0f421909e231c7b42e596a7a44a1885f41b61425935078f31085df7673e7e232020af9021834306b0c3b461064bbf

Score
10/10
raccoon887a0ffaca448362277f2227182491216b734133stealer

Malware Config

Extracted

Family

raccoon

Botnet

887a0ffaca448362277f2227182491216b734133

Attributes
  • url4cnc

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      5522c3d773e1fa20fe6ecd690deb736f352595fa18f682aa0378f76a99459820

    • Size

      511KB

    • MD5

      9840d8ffae033ce713b8e82b78dead01

    • SHA1

      5063692c873e213ff0a5ae21ecb47b1d999d01c3

    • SHA256

      5522c3d773e1fa20fe6ecd690deb736f352595fa18f682aa0378f76a99459820

    • SHA512

      e5b2655f48954e762e3af2424140b4a405a0f421909e231c7b42e596a7a44a1885f41b61425935078f31085df7673e7e232020af9021834306b0c3b461064bbf

    Score
    10/10
    raccoon887a0ffaca448362277f2227182491216b734133stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks