MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 69ee26ba2019f4cc30752f00a815a726795c8e898edffe739daa6e84e6c41ac2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Dridex


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 69ee26ba2019f4cc30752f00a815a726795c8e898edffe739daa6e84e6c41ac2
SHA3-384 hash: cdd0de51e0e76b5eb3183b45e49690248efb99abb04614f38896a5c8c03f7449270e1a1f94015d4886f4d2884188ad04
SHA1 hash: 1d1844668a175b1d85f31732331827ff77cb79c4
MD5 hash: d6902c0c63c7360b20636fbf082f5dcc
humanhash: bravo-green-zebra-coffee
File name:bjsdke.exe
Download: download sample
Signature Dridex
Create hunting rule
File size:212'992 bytes
First seen:2020-07-15 16:02:41 UTC
Last seen:2020-07-15 17:06:31 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash fcaa5d9c54a57cf14001d5d77e71384e (2 x Dridex)
ssdeep 3072:S5o9mQOTS8MwANXAGAE3BXdLszLA1a6KepCKPOlvcaUZg6w8MIUlfCAZIKxy:S5ouTSXb3twgyepCKecnrweEf
Threatray 116 similar samples on MalwareBazaar
TLSH B4241251BCEC49F9E4C7263B5935A36808242D064729DA94C8CCE87DC7AE4FF50DA2F2
Reporter JAMESWT_WT
Tags:Dridex

Intelligence

File Origin
# of uploads :
2
# of downloads :
300
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Detection(s):
SecuriteInfo.com.Win32.Kryptik.HEXA.27464.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Generic.mg.89ebbc1ee8354b40.16999.UNOFFICIAL
Create hunting rule

Result
Verdict:
Malware
Maliciousness:
Detection:
dridex
Create hunting rule
Link:
https://mwdb.cert.pl/sample/69ee26ba2019f4cc30752f00a815a726795c8e898edffe739daa6e84e6c41ac2/
Threat name:
Win32.Infostealer.Dridex
Create hunting rule
Status:
Malicious
First seen:
2020-07-15 16:04:06 UTC
File Type:
PE (Exe)
AV detection:
24 of 29 (82.76%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
3b15d18c463f3a0a6c2b2915d129924dd0791bc5252cfee280b9a6e296229403
Dridex
93c97bf3711640d5bd8ff0c2033492b2cea7b81ef2ea0e6f6b2327913e9be9d7
Dridex
97a3f574869dfb82834d7481df5e280ab0944dda13ff548d5674e960493cfb8c
Dridex
9c749e76dc4c135b3e3f87eac42b6aae70a8efec197f9d311917a665697c1bbd
Dridex
9f6ca81f9e658fca42b50aaacf38bb2aa842ae5ef28867883a69d4790f307fb4
Dridex
a109cfcf3760c09007ecefe53b1b2d63bbb256138238c2b0b0ea436b08e5acbe
Dridex
cbca1b2ee6c097f73a866a102f4f17a5966ede96d69b51d6702a0882181fa866
Dridex
ce41031b56cdb4cf97a4c9e24b14ffd16672719457b5a394daa7a4ccb91591bf
Dridex
f8c974a6572fd522a64d22da3bf36db7e912ccb700bd41623ed286f1e8b0e939
Dridex
f959039896cdd9c4add867b06af7d100629377c66ef7fb0fd4aeba48f9a9593e
Dridex
+ 106 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/200715-ae9zc2cata/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Dridex

Executable exe 69ee26ba2019f4cc30752f00a815a726795c8e898edffe739daa6e84e6c41ac2

(this sample)

  
Link
http://cooperjcw.xyz/bjsdke.exe
Cape
Cape
https://www.capesandbox.com/analysis/26082/
  
URLhaus
https://urlhaus.abuse.ch/url/413157/
  
Delivery method
Distributed via web download

Comments