MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 660a91641b6c4ba3b9d0b3273b318b51314cfc67c8f5f0e4ca20a2e0932329a7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Dridex


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 660a91641b6c4ba3b9d0b3273b318b51314cfc67c8f5f0e4ca20a2e0932329a7
SHA3-384 hash: 819a6e73d0b653d94e4b4d1f38cbddad0097e4cfe13c73df8307b40c39139194669b805811e2ce73cd6e75dc196d3776
SHA1 hash: 11dbafa0bfaa7f8f19219b054e2ca50e45481154
MD5 hash: 0f2b7d42b9833128f5f58887a7004bf6
humanhash: apart-crazy-south-music
File name:0f2b7d42b9833128f5f58887a7004bf6.exe
Download: download sample
Signature Dridex
Create hunting rule
File size:448'064 bytes
First seen:2020-05-11 14:08:47 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 5f5b77209fc49a7c3e0cd58bced0df9f (2 x Dridex)
ssdeep 12288:7S+EHV+asYMqw3kNHvbyVfbWWbyHjaSabybbybvkblebq:u+9Y9NHvbyVfbWWbyHjaSabybbybvkbV
Threatray 113 similar samples on MalwareBazaar
TLSH B694C0127A404674D5320472889BDBF2C41A2EF44A24995273E1FE5B3EB36E7D63F06B
Reporter abuse_ch
Tags:Dridex exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
102
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-08 13:13:20 UTC
AV detection:
28 of 31 (90.32%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=myfjcza3nrf2hooqwmttwmmlkeyuz7dhzd27bzgkecrobezdfgtq._file
Verdict:
malicious
Label(s):
dridex
Create hunting rule
Similar samples:
0a383870010db689605e8aac2fd1a9ad284558ef9eccc6d07bdc9dbbc573480f
Dridex
19042ea0e61783a3c281e3f02e0e2e2b07e9421bae0afeeae21febe450510f0c
Dridex
4655c0216538f752dea2ce1649807d597cd83a935f1385bdd8f418616de97b68
Dridex
5ade0c4492ffe4b77776543635a5cad0eef6d4a207f69dac0a59f9ad76aa42ba
Dridex
ab44ef41e492f3df1be566ddde081d666b3e9f55ee6f0f195fe0acd4d9701912
Dridex
d3e9f6933d519b6bd1514ceaaa14df64722214c0c6c2a60a6924c92f284b3c08
Dridex
d62a40010c67fd83e79a6307c7be774a26ddf38f05c71785936227f3b6882584
Dridex
d77234374d79b24022c26ecdd16a684ae7e94efba502422d74852b0eddd4f1b4
Dridex
e8a7a5a713631017d1fbdda8f7b57ce7b5b6b2fa807a69a72cfd1f294f8f8e45
Dridex
fcd9abcb235ec7aea9a425394952653a57b44ba9233e934289d2b6892fac82b2
Dridex
+ 103 additional samples on MalwareBazaar
Result
Malware family:
dridex
Create hunting rule
Score:
  10/10
Tags:
family:dridex botnet loader
Link:
https://tria.ge/reports/201109-ngzfanecvn/
Behaviour
Dridex Loader
Dridex
Malware Config
C2 Extraction:
87.98.218.33:443
54.38.143.246:691
159.65.79.173:3886
153.122.13.133:1443
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments