Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cff9e1927330b4d56ca4d91f535e9be6297cdc83a3c6450e43fa4458277777b

  • Size

    506KB

  • Sample

    211027-a4nd1aadg9

  • MD5

    ba0a77ed4e26b26ae6a345bb75716d64

  • SHA1

    723779196884565cd26076feda479c8523ff3724

  • SHA256

    0cff9e1927330b4d56ca4d91f535e9be6297cdc83a3c6450e43fa4458277777b

  • SHA512

    0e8394bc5654fcb9f5b8080a86cde85eaa60d6ede0588f51cde0644197bebea4bad2d7e924f316d6c6fd95bb6de6ec89ba11dec11d6db5183fe35957a551e6da

Score
10/10
raccoon60e59be328fbd2ebac1839ea99411dccb00a6f49stealer

Malware Config

Extracted

Family

raccoon

Botnet

60e59be328fbd2ebac1839ea99411dccb00a6f49

Attributes
  • url4cnc

    http://telegin.top/agrybirdsgamerept

    http://ttmirror.top/agrybirdsgamerept

    http://teletele.top/agrybirdsgamerept

    http://telegalive.top/agrybirdsgamerept

    http://toptelete.top/agrybirdsgamerept

    http://telegraf.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      0cff9e1927330b4d56ca4d91f535e9be6297cdc83a3c6450e43fa4458277777b

    • Size

      506KB

    • MD5

      ba0a77ed4e26b26ae6a345bb75716d64

    • SHA1

      723779196884565cd26076feda479c8523ff3724

    • SHA256

      0cff9e1927330b4d56ca4d91f535e9be6297cdc83a3c6450e43fa4458277777b

    • SHA512

      0e8394bc5654fcb9f5b8080a86cde85eaa60d6ede0588f51cde0644197bebea4bad2d7e924f316d6c6fd95bb6de6ec89ba11dec11d6db5183fe35957a551e6da

    Score
    10/10
    raccoon60e59be328fbd2ebac1839ea99411dccb00a6f49stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks