Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26571901dd3d00cab655189578adb869bd030c75e30ba7256ccbcaa59cc7f63c

  • Size

    418KB

  • Sample

    211104-h2vz3adbfl

  • MD5

    d2b4bce01df5f735c3e813dc8b5eed17

  • SHA1

    78c316416f1a56078e5cd7fa862eec303d239bda

  • SHA256

    26571901dd3d00cab655189578adb869bd030c75e30ba7256ccbcaa59cc7f63c

  • SHA512

    69b5b0d936e374563d196147593ffbdae2f1bce27d74fab9474fb081bb5208d6ee95ca6410de3082f5293c36e961489efd4cad45cd1c74bea9fef8dfeac566b8

Score
10/10
raccoonb3ed1d79826001317754d88a62db05820a1ecd19stealer

Malware Config

Extracted

Family

raccoon

Botnet

b3ed1d79826001317754d88a62db05820a1ecd19

Attributes
  • url4cnc

    http://teleliver.top/agrybirdsgamerept

    http://livetelive.top/agrybirdsgamerept

    http://teleger.top/agrybirdsgamerept

    http://telestrong.top/agrybirdsgamerept

    http://tgrampro.top/agrybirdsgamerept

    http://teleghost.top/agrybirdsgamerept

    http://teleroom.top/agrybirdsgamerept

    http://telemir.top/agrybirdsgamerept

    http://teletelo.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      26571901dd3d00cab655189578adb869bd030c75e30ba7256ccbcaa59cc7f63c

    • Size

      418KB

    • MD5

      d2b4bce01df5f735c3e813dc8b5eed17

    • SHA1

      78c316416f1a56078e5cd7fa862eec303d239bda

    • SHA256

      26571901dd3d00cab655189578adb869bd030c75e30ba7256ccbcaa59cc7f63c

    • SHA512

      69b5b0d936e374563d196147593ffbdae2f1bce27d74fab9474fb081bb5208d6ee95ca6410de3082f5293c36e961489efd4cad45cd1c74bea9fef8dfeac566b8

    Score
    10/10
    raccoonb3ed1d79826001317754d88a62db05820a1ecd19stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks