MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c4f35b00490a1875286701b5909053c04668e4ec09da8e4ecd7405a3c136d6b0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Dridex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c4f35b00490a1875286701b5909053c04668e4ec09da8e4ecd7405a3c136d6b0
SHA3-384 hash: e292482b7b99ba04bd94d45cb6826d6488d6797191e4d29549e15608f059e4a42280e4393ea13ac7f5834cb7a32bd685
SHA1 hash: 3ba456a01a6394473f36567213a384f1dde76885
MD5 hash: 438926db06d8e2e85b5a443e0528495b
humanhash: fanta-item-double-missouri
File name:okasle.exe
Download: download sample
Signature Dridex
Create hunting rule
File size:200'704 bytes
First seen:2020-07-02 15:50:10 UTC
Last seen:2020-07-02 15:54:12 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 138d7cf0cff2a37eaef02b9f85e3c81b (6 x Dridex)
ssdeep 6144:KqWuU/QvBeWgUCFWK9cL5ipw99NaML6Ez:foQRQF7CcyvN8
Threatray 78 similar samples on MalwareBazaar
TLSH C9140213362E60DDE22ABC70B11AEE1957006CA99559C647AA8E3FDB1C3FE815C21377
Reporter JAMESWT_WT
Tags:Dridex

Intelligence

File Origin
# of uploads :
2
# of downloads :
263
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Detection(s):
SecuriteInfo.com.Generic.mg.45dfa08a001e4827.1646.UNOFFICIAL
Create hunting rule

Detection:
dridex
Create hunting rule
Link:
https://mwdb.cert.pl/sample/c4f35b00490a1875286701b5909053c04668e4ec09da8e4ecd7405a3c136d6b0/
Threat name:
Win32.Infostealer.Dridex
Create hunting rule
Status:
Malicious
First seen:
2020-07-02 15:52:05 UTC
File Type:
PE (Exe)
Extracted files:
2
AV detection:
25 of 29 (86.21%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ytzvwacjbimhkkdhag2zbectybdgrzhmbhni4twnoqc2hqjw22ya._file
Verdict:
suspicious
Similar samples:
043da6ea28e1ae44078f4941c3e7db3c63566f4b312121bd3f81b6b3cec0e8d7
Dridex
0a3dcb013e94255746453eef065037b396b4174e080c3bf5a7fbf56e7ef76fbe
Dridex
4160e31c01e1c9fbad1e737efb974a0cb35721023607e831292c26873bdee4db
Dridex
4fae283ae2323e49f1a95871e773e3a2bfe54dc151cd7c11cbe41a36fd83bb14
Dridex
55897dc537d308842906dbf8bffde6eb846cdd6b5e9584d7efcbe7c342d5e699
Dridex
73542918c46a8a028d9a19169f5cb4fa09f3ea609085e3efd5324d07254d7280
Dridex
a84a6fde4dbc4575700b8be705ed1df6d576e5aa6054aa66f1fae98350484a84
Dridex
cf62e1cdb2dd3f209c719e62340f61a69d442f3b391f43528c603c70ab18c8b6
Dridex
f072b971950ba8a2e12c85501f0d63160f833df8411c5fa1cda8ac6261b27a2d
Dridex
fcc0db0ce710f68915b4d73274d69bb5765012b02631bb737c66a32a9a708aab
Dridex
+ 68 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/200702-derm8ksxaj/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Dridex

Executable exe c4f35b00490a1875286701b5909053c04668e4ec09da8e4ecd7405a3c136d6b0

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/407081/
  
Delivery method
Distributed via web download
Cape
Cape
https://www.capesandbox.com/analysis/18516/

Comments