MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a84a6fde4dbc4575700b8be705ed1df6d576e5aa6054aa66f1fae98350484a84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Dridex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: a84a6fde4dbc4575700b8be705ed1df6d576e5aa6054aa66f1fae98350484a84
SHA3-384 hash: 66a89c243070700e15402c33b3913b85e39dc58a9124745f861e9c5345a86cb1a91144c6eab6b2d0e58593ceb8deb159
SHA1 hash: d39fa2312602ad506a4a58055a5643394a4e644d
MD5 hash: 4740ca06e2e0621af0af4dcc7199c395
humanhash: montana-berlin-berlin-quiet
File name:a84a6fde4dbc4575700b8be705ed1df6d576e5aa6054aa66f1fae98350484a84
Download: download sample
Signature Dridex
File size:200'704 bytes
First seen:2020-07-02 15:16:27 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 138d7cf0cff2a37eaef02b9f85e3c81b (6 x Dridex)
ssdeep 6144:zqWuU/QvBeWgUCFWK9mL5ipw99NaML6Ez:GoQRQF7gcyvN8
Threatray 78 similar samples on MalwareBazaar
TLSH 4D140213362E60DDE22ABC70B11AEE1957006CA99559C647AA8E3FDB1C3BE815C21377
Reporter JAMESWT_WT
Tags:Dridex

Intelligence


File Origin
# of uploads :
1
# of downloads :
263
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Infostealer.Dridex
Status:
Malicious
First seen:
2020-07-02 15:18:05 UTC
File Type:
PE (Exe)
Extracted files:
2
AV detection:
24 of 27 (88.89%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Dridex

Executable exe a84a6fde4dbc4575700b8be705ed1df6d576e5aa6054aa66f1fae98350484a84

(this sample)

  
Delivery method
Distributed via web download

Comments