Overview

overview

10

Static

static

dridex

windows10_x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    07-12-2021 06:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8016cf2a984909cad748683e27ecef70a65c417317b55e8b4031d0aec1f10f06.exe

  • Size

    570KB

  • MD5

    12e524ab34859f7ffdc7f92cdbe2e283

  • SHA1

    3e7b2ac54d1523be93df208c33721a97bec0cb67

  • SHA256

    8016cf2a984909cad748683e27ecef70a65c417317b55e8b4031d0aec1f10f06

  • SHA512

    d667b9e122cf5cbbeeb095151474a27b581039ed6811f51e5d359387094b78bff3f15cf7f69e1d1d79311eb8efbf12f410fe7df5a9d129e2310e88c02ed85ac7

Score
10/10
raccoonfd4f23250443a724a3d1548e6ab07c481dfc2814stealer

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

fd4f23250443a724a3d1548e6ab07c481dfc2814

Attributes
  • url4cnc

    http://91.219.236.27/duglassa1

    http://94.158.245.167/duglassa1

    http://185.163.204.216/duglassa1

    http://185.225.19.238/duglassa1

    http://185.163.204.218/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

Processes

  • C:\Users\Admin\AppData\Local\Temp\8016cf2a984909cad748683e27ecef70a65c417317b55e8b4031d0aec1f10f06.exe
    "C:\Users\Admin\AppData\Local\Temp\8016cf2a984909cad748683e27ecef70a65c417317b55e8b4031d0aec1f10f06.exe"
    1⤵
      PID:3384

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3384-116-0x00000000006D1000-0x0000000000721000-memory.dmp
      Filesize

      320KB

      Download
    • memory/3384-117-0x0000000000510000-0x000000000065A000-memory.dmp
      Filesize

      1.3MB

      Download
    • memory/3384-118-0x0000000000400000-0x0000000000510000-memory.dmp
      Filesize

      1.1MB

      Download