Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2eda2516674262ed23e8c0f5056e27abac9cbb35f392fed240f37afcb5b7e2ff

  • Size

    512KB

  • Sample

    211021-l2gn8aahhn

  • MD5

    5a0ea99473afaa1bb4f1b353cbb116da

  • SHA1

    0cc8f29d6066ce627c4531852342de73c2f014dc

  • SHA256

    2eda2516674262ed23e8c0f5056e27abac9cbb35f392fed240f37afcb5b7e2ff

  • SHA512

    c03a169be6c9c4f9fcb7a1bafed1c0c34d6239b04af9138275dbd0d799bfd7f1f971bf6f87d4fffd705da3e74c760bff62dc00631d957256d09ea0a8871128be

Score
10/10
raccoon887a0ffaca448362277f2227182491216b734133stealer

Malware Config

Extracted

Family

raccoon

Botnet

887a0ffaca448362277f2227182491216b734133

Attributes
  • url4cnc

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      2eda2516674262ed23e8c0f5056e27abac9cbb35f392fed240f37afcb5b7e2ff

    • Size

      512KB

    • MD5

      5a0ea99473afaa1bb4f1b353cbb116da

    • SHA1

      0cc8f29d6066ce627c4531852342de73c2f014dc

    • SHA256

      2eda2516674262ed23e8c0f5056e27abac9cbb35f392fed240f37afcb5b7e2ff

    • SHA512

      c03a169be6c9c4f9fcb7a1bafed1c0c34d6239b04af9138275dbd0d799bfd7f1f971bf6f87d4fffd705da3e74c760bff62dc00631d957256d09ea0a8871128be

    Score
    10/10
    raccoon887a0ffaca448362277f2227182491216b734133stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks