MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 043da6ea28e1ae44078f4941c3e7db3c63566f4b312121bd3f81b6b3cec0e8d7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Dridex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 043da6ea28e1ae44078f4941c3e7db3c63566f4b312121bd3f81b6b3cec0e8d7
SHA3-384 hash: 4723190cd9a4f0554270d5b71c6d8b6fe094c50c7ee39289af513997d0415d122cd9686d59cb0db4a749cae8b2ee137e
SHA1 hash: 0b001cd72cb59e6bb0e943e5efe13a4dd94f59d5
MD5 hash: 415c4d21436675fe910a54dd57e75117
humanhash: green-fifteen-nitrogen-mike
File name:043da6ea28e1ae44078f4941c3e7db3c63566f4b312121bd3f81b6b3cec0e8d7
Download: download sample
Signature Dridex
File size:200'704 bytes
First seen:2020-07-02 15:16:17 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 138d7cf0cff2a37eaef02b9f85e3c81b (6 x Dridex)
ssdeep 6144:kqWuU/QvBeWgUCFWK9bL5ipw99NaML6Ez:xoQRQF7dcyvN8
Threatray 78 similar samples on MalwareBazaar
TLSH B3140213362E60DDE22ABC70B11AEE1D57006CA99559C647AA8E3FDB1C3FE815C21377
Reporter JAMESWT_WT
Tags:Dridex

Intelligence


File Origin
# of uploads :
1
# of downloads :
260
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Infostealer.Dridex
Status:
Malicious
First seen:
2020-07-02 14:18:44 UTC
File Type:
PE (Exe)
Extracted files:
2
AV detection:
26 of 29 (89.66%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Dridex

Executable exe 043da6ea28e1ae44078f4941c3e7db3c63566f4b312121bd3f81b6b3cec0e8d7

(this sample)

  
Delivery method
Distributed via web download

Comments