MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 1dc170fb1ca9e7a48b7b866d7ef0af55d84a7ff819864a5f83ddf9ddf08ffe7e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Dridex
Vendor detections: 5
| SHA256 hash: | 1dc170fb1ca9e7a48b7b866d7ef0af55d84a7ff819864a5f83ddf9ddf08ffe7e |
|---|---|
| SHA3-384 hash: | def103c08b9f26742227c914312e32e3adb271ee15066257b22ae95a085b3703fa488e467dc86cbec3e77d46d8660717 |
| SHA1 hash: | e87aa0a39f06bee77e3edf9e7d2eaeab8154b0d8 |
| MD5 hash: | 4b4203c8b8be26fd7d7e47d2f5ca66f0 |
| humanhash: | october-kansas-november-maryland |
| File name: | 6719974801482.xls |
| Download: | download sample |
| Signature | Dridex |
| File size: | 78'848 bytes |
| First seen: | 2020-04-29 13:08:28 UTC |
| Last seen: | 2020-04-29 13:42:54 UTC |
| File type: |  xls |
| MIME type: | application/vnd.ms-excel |
| ssdeep | 1536:C9INk3hbdlylKsgqopeJBWhZFGkE+cL2NQAACA8O2F/kkj9Jn8Yw4lFyyRwm3a17:C9INk3hbdlylKsgqopeJBWhZFGkE+cLV |
| Threatray | 73 similar samples on MalwareBazaar |
| TLSH | C7732ED76F738871D645933C4CE989419712FE804AA6434B358073BA7EF1DB0BF11AA9 |
| Reporter |  cocaman |
| Tags: | Dridex xls |
cocaman
Malicious emailFrom: DHL - Cayla Sharpe <Cayla.Sharpe@dhl.com>
Received: from it (net-37-119-85-163.cust.vodafonedsl.it [37.119.85.163])
Date: Wed, 29 Apr 2020 14:03:17 +0100
Subject: - invoice(s) apr 2020
Attachment: 6719974801482.xls
Intelligence
File Origin
# of uploads :
2
# of downloads :
107
Origin country :
n/a
Vendor Threat Intelligence
Result
Threat name:
Unknown
Detection:
malicious
Classification:
expl
Score:
80 / 100
Behaviour
Behavior Graph:
n/a
Gathering data
Threat name:
Document-Word.Trojan.Rdn
Status:
Malicious
First seen:
2020-04-29 12:44:27 UTC
File Type:
Document
Extracted files:
25
AV detection:
20 of 31 (64.52%)
Threat level:
5/5
Detection(s):
Suspicious file
Verdict:
malicious
Label(s):
dridex
gozi
Similar samples:
+ 63 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Dropping
Dridex
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.