Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    915b8ce2cd2f723b675d4a9c7740d99a8e49ca2e1e474fab58f52f572fc35635

  • Size

    464KB

  • Sample

    211028-eeqv2shbc5

  • MD5

    babfaf5aa6d5a6b6e530da822dead4d2

  • SHA1

    d1b308d555f0e5cfa3dadca8d2ccade13e6d433a

  • SHA256

    915b8ce2cd2f723b675d4a9c7740d99a8e49ca2e1e474fab58f52f572fc35635

  • SHA512

    5d3c35582cf37c9c397f02a16396d7d6e30dd65a335d0227d2cda8a220c30daa3cf43e400b8c3ed03d26c2e2e0580fe8b05da93ffb32aa5f133ecd664b0370d0

Score
10/10
raccoon60e59be328fbd2ebac1839ea99411dccb00a6f49stealer

Malware Config

Extracted

Family

raccoon

Botnet

60e59be328fbd2ebac1839ea99411dccb00a6f49

Attributes
  • url4cnc

    http://telegin.top/agrybirdsgamerept

    http://ttmirror.top/agrybirdsgamerept

    http://teletele.top/agrybirdsgamerept

    http://telegalive.top/agrybirdsgamerept

    http://toptelete.top/agrybirdsgamerept

    http://telegraf.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      915b8ce2cd2f723b675d4a9c7740d99a8e49ca2e1e474fab58f52f572fc35635

    • Size

      464KB

    • MD5

      babfaf5aa6d5a6b6e530da822dead4d2

    • SHA1

      d1b308d555f0e5cfa3dadca8d2ccade13e6d433a

    • SHA256

      915b8ce2cd2f723b675d4a9c7740d99a8e49ca2e1e474fab58f52f572fc35635

    • SHA512

      5d3c35582cf37c9c397f02a16396d7d6e30dd65a335d0227d2cda8a220c30daa3cf43e400b8c3ed03d26c2e2e0580fe8b05da93ffb32aa5f133ecd664b0370d0

    Score
    10/10
    raccoon60e59be328fbd2ebac1839ea99411dccb00a6f49stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks