MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 35382c36cef5048bd57a081c6a8477048ca0ae327c81d7e18947f3ce10fb2877. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Dridex


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 35382c36cef5048bd57a081c6a8477048ca0ae327c81d7e18947f3ce10fb2877
SHA3-384 hash: 5be91382ceddcac52e21f69b16f9c206be897f384f20884315391d0725eef7bc622aa9301ef595f2908a57933d706ea3
SHA1 hash: 37263ba153c0506815b17daada4e891c3be68f6b
MD5 hash: 5a27dd08bcce0297128d3ea9e3faea7a
humanhash: oklahoma-chicken-lithium-five
File name:5a27dd08bcce0297128d3ea9e3faea7a.dll
Download: download sample
Signature Dridex
Create hunting rule
File size:1'016'496 bytes
First seen:2020-11-09 19:25:22 UTC
Last seen:Never
File type:DLL dll
MIME type:application/x-dosexec
ssdeep 24576:IjOXGq89BRVHd6njFrxNbesrP8AeXkyd/R:dXT812njFrxNasrP8rXx
Threatray 2 similar samples on MalwareBazaar
TLSH 99251250B6839479D27358348968CDB6CB28BF510F786CC772C55C2B1E3A0D1AB36E7A
Reporter abuse_ch
Tags:dll Dridex

Intelligence

File Origin
# of uploads :
1
# of downloads :
90
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Artemis5A27DD08BCCE.1203.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Artemis.12332.UNOFFICIAL
Create hunting rule

Result
Verdict:
Clean
Maliciousness:
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
suspicious
Classification:
n/a
Score:
22 / 100
Link:
https://www.joesandbox.com/analysis/527060
Signature
a
c
d
e
f
g
h
i
L
M
n
o
p
r
s
t
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/35382c36cef5048bd57a081c6a8477048ca0ae327c81d7e18947f3ce10fb2877/
Threat name:
Win32.PUA.Wacapew
Create hunting rule
Status:
Malicious
First seen:
2020-11-10 06:37:09 UTC
AV detection:
10 of 29 (34.48%)
Threat level:
  1/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=gu4cynwo6ucixvl2baogvbdxasgkblrspsa5pymji7z44eh3fb3q._file
Verdict:
unknown
Similar samples:
45b2e2756067823fa368a662b7b8fad6e5b99a558ce1694a534bd38e1ef4287d
Dridex
a07f03acb1bd6c83e7b79bbd2c28b672f533cc58b194a97b0c1f6002e54b4313
Dridex
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-2kh3d4jbmx/
Behaviour
Suspicious use of WriteProcessMemory
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/35382c36cef5048bd57a081c6a8477048ca0ae327c81d7e18947f3ce10fb2877

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Dridex

DLL dll 35382c36cef5048bd57a081c6a8477048ca0ae327c81d7e18947f3ce10fb2877

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/799738/
  
Delivery method
Distributed via web download

Comments