MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 055f7e7b22e851afae09773a609a4f354e2dd8455b2eaf2301eb3d8701b60936. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Dridex


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 055f7e7b22e851afae09773a609a4f354e2dd8455b2eaf2301eb3d8701b60936
SHA3-384 hash: 8642e4235986f215689bd4cb6599b478fc0991c710cfb5614246ab6412815d34e60467fa95401f9652d9e7159cda86cc
SHA1 hash: 755b411db2474faf2d7c967e8656c540d083351a
MD5 hash: 8fca7af21a18eea054de86c2b061f3e2
humanhash: johnny-jig-april-table
File name:8fca7af21a18eea054de86c2b061f3e2.exe
Download: download sample
Signature Dridex
Create hunting rule
File size:245'760 bytes
First seen:2020-05-06 18:48:56 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 3ff9d103d412b4aa1c3f46cf5b5df36b (2 x Dridex)
ssdeep 6144:yYk03W0iVRyzzn5rCr4R3zcWFycIrrwvfEXoS:00GpefnxR3z7MrrwvfEY
Threatray 84 similar samples on MalwareBazaar
TLSH C834BDA067F99659F5F36F756DBA12855F76BCA2AC39C20C5340200E0DB6F849DA0B33
Reporter abuse_ch
Tags:Dridex exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
125
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.FileRepMalware.18787.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Dridex
Create hunting rule
Status:
Malicious
First seen:
2020-05-05 21:52:59 UTC
File Type:
PE (Exe)
AV detection:
27 of 30 (90.00%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=avpx46zc5bi27lqjo45gbgspgvhc3wcflmxk6iyb5m6yoanwbe3a._file
Verdict:
malicious
Label(s):
dridex
Create hunting rule
Similar samples:
110fe6f199298f89f704050eb4dc0d2b19b0985a74ead588441fabac693ab3f5
Dridex
40479c0e95d9426135d1f65c7f29e1a782a5cc79f1dcd5cb2c04aa8995f06a0b
Dridex
43756195653d9b20db70b3b2700d6ece0e927da322db216d12e6eeb6af316f3f
Dridex
4fae283ae2323e49f1a95871e773e3a2bfe54dc151cd7c11cbe41a36fd83bb14
Dridex
68659662a735e14235e68e5edee17995b1443af662e6d789c5461c8733f4b3aa
Dridex
6a05f362aa3b7f597181f694af55d4bddff4cf3e54798dae7fe884dd1faa0494
Dridex
99f851b8bb921318568a9c87ef39bc353c0e3c9af67a8f5078e957f4bb046491
Dridex
ce90df48bfadeec34a0e41e19bb140fda94c59fe3d27095b517da6bba4f9eeb3
Dridex
f072b971950ba8a2e12c85501f0d63160f833df8411c5fa1cda8ac6261b27a2d
Dridex
f1748543fd3d8ad75889012685d7ca632f257723dc5454ebfadd32c1cf2f1ac6
Dridex
+ 74 additional samples on MalwareBazaar
Result
Malware family:
dridex
Create hunting rule
Score:
  10/10
Tags:
family:dridex botnet loader evasion trojan
Link:
https://tria.ge/reports/201109-bwlazgctcj/
Behaviour
Checks whether UAC is enabled
Dridex Loader
Dridex
Malware Config
C2 Extraction:
111.67.68.5:443
178.254.40.33:3389
172.86.183.147:691
107.161.25.120:8443
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Dridex

Executable exe 055f7e7b22e851afae09773a609a4f354e2dd8455b2eaf2301eb3d8701b60936

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/358430/
  
Delivery method
Distributed via web download

Comments