MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1b004f4a0b41a1e7f0ebf49de986904b872626641c6e40e9893e09e848a0a303. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 1b004f4a0b41a1e7f0ebf49de986904b872626641c6e40e9893e09e848a0a303
SHA3-384 hash: 4246f4036591662b4435cb681af337b9ba8a63b88a54a9cbf0cd8882a1772720963b6af45520278e080ba3185152386b
SHA1 hash: 20989b422c9e874dff3d2d2a15570fa5270952c3
MD5 hash: cf39f7ef871c2ff36d9c11ec3865cfc6
humanhash: batman-single-east-california
File name:SecuriteInfo.com.Trojan.Dridex.735.14220.32307
Download: download sample
File size:352'984 bytes
First seen:2021-01-21 17:25:02 UTC
Last seen:Never
File type:DLL dll
MIME type:application/x-dosexec
ssdeep 6144:CyIRmZlAY93XOVHPkk7eoaVuQp5oTPdnntUK58T3GNfKIoyD32yyYnxwldjwZalo:LIRKl993y8SebVD0DJZ58TCBjDGfYn+W
Threatray 3 similar samples on MalwareBazaar
TLSH 7A74E061ED92F46CD75C23748C9AECBD0192BD455AA9FD9F32EF1E5B20A2623F013244
Reporter SecuriteInfoCom

Intelligence


File Origin
# of uploads :
1
# of downloads :
113
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Sending a UDP request
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
clean
Classification:
n/a
Score:
3 / 100
Behaviour
Behavior Graph:
n/a
Threat name:
Win32.Trojan.Mikey
Status:
Malicious
First seen:
2021-01-21 17:25:13 UTC
AV detection:
7 of 46 (15.22%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Suspicious use of WriteProcessMemory
Unpacked files
SH256 hash:
1b004f4a0b41a1e7f0ebf49de986904b872626641c6e40e9893e09e848a0a303
MD5 hash:
cf39f7ef871c2ff36d9c11ec3865cfc6
SHA1 hash:
20989b422c9e874dff3d2d2a15570fa5270952c3
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments