MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 af1ab453137d6610127a5a3e310c3756d10977a71d231f9e37a9763b1254fdc1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: af1ab453137d6610127a5a3e310c3756d10977a71d231f9e37a9763b1254fdc1
SHA3-384 hash: 8b091dc812cd88e84e676e0db87f7a3652ff2341849f92962dd8400771e445f8d39de2b9da6753fc78552d47459e3000
SHA1 hash: cc92f96d618b8a36c88877119fd0fc8b3d5ae256
MD5 hash: 1d99edfeada6da09e406633a06f70ec2
humanhash: florida-friend-quiet-oven
File name:mzpqosjf.exe
Download: download sample
File size:204'800 bytes
First seen:2020-06-24 14:22:42 UTC
Last seen:2020-06-24 15:01:21 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 01d324fd7f091d6aed1afc11ba587d0a (1 x Dridex)
ssdeep 6144:dfzMbUxJ8Jp9wEMv1xj4v2D/rtcJe/PsV5:1Yu8Jp9wz1r/x8e/UV
Threatray 71 similar samples on MalwareBazaar
TLSH 3F14F142B3F950D9FFBBA435672242BD46187E92849499433BC4FE0BB97470BCE11B92
Reporter James_inthe_box
Tags:exe

Intelligence


File Origin
# of uploads :
2
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:
Threat name:
Win32.Infostealer.Dridex
Status:
Malicious
First seen:
2020-06-24 14:13:34 UTC
File Type:
PE (Exe)
Extracted files:
2
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments