Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07521fe8947edf96c0ff0e025b0413a4efac7d2c2a4af4d6c133be25f0965cfa

  • Size

    570KB

  • Sample

    211203-z4xp4scch4

  • MD5

    c0ebe30837490a2e4a95fa7ae9d77446

  • SHA1

    43c0908877efe05adfe5a99a719f12ce5c16f8ad

  • SHA256

    07521fe8947edf96c0ff0e025b0413a4efac7d2c2a4af4d6c133be25f0965cfa

  • SHA512

    bb7b62a577ab7525062629ed809179e102960795348c04159d6cd40d5175c73336397941fe91e1dca98cd54e188f403085ef347045b73dfd464ad6c0802c2a4e

Score
10/10
raccoon049dc5184bb65eb56e4e860bf61427e2a0fcba1estealer

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

049dc5184bb65eb56e4e860bf61427e2a0fcba1e

Attributes
  • url4cnc

    http://185.225.19.18/duglassa1

    http://91.219.237.227/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Targets

    • Target

      07521fe8947edf96c0ff0e025b0413a4efac7d2c2a4af4d6c133be25f0965cfa

    • Size

      570KB

    • MD5

      c0ebe30837490a2e4a95fa7ae9d77446

    • SHA1

      43c0908877efe05adfe5a99a719f12ce5c16f8ad

    • SHA256

      07521fe8947edf96c0ff0e025b0413a4efac7d2c2a4af4d6c133be25f0965cfa

    • SHA512

      bb7b62a577ab7525062629ed809179e102960795348c04159d6cd40d5175c73336397941fe91e1dca98cd54e188f403085ef347045b73dfd464ad6c0802c2a4e

    Score
    10/10
    raccoon049dc5184bb65eb56e4e860bf61427e2a0fcba1estealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks