MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e8a7a5a713631017d1fbdda8f7b57ce7b5b6b2fa807a69a72cfd1f294f8f8e45. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Dridex


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e8a7a5a713631017d1fbdda8f7b57ce7b5b6b2fa807a69a72cfd1f294f8f8e45
SHA3-384 hash: 496261c8fc1a3ec124560a08a87f2624c073f5f347a5f7da57871fbd53983d9831a5bafb8173c19e30840e41dea97031
SHA1 hash: 3244dd5e603c01be429e6899a2f80e3920711ac4
MD5 hash: 2dd5f0612a72d8dd0706f76dec7e973d
humanhash: edward-massachusetts-magazine-vermont
File name:2dd5f0612a72d8dd0706f76dec7e973d.exe
Download: download sample
Signature Dridex
Create hunting rule
File size:448'064 bytes
First seen:2020-05-11 15:31:54 UTC
Last seen:2020-05-11 17:09:16 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 5f5b77209fc49a7c3e0cd58bced0df9f (2 x Dridex)
ssdeep 12288:6S+EHV+asYMqw3kNHvbyVfbWWbyHjaSabybbybvkblebq:T+9Y9NHvbyVfbWWbyHjaSabybbybvkbV
Threatray 113 similar samples on MalwareBazaar
TLSH 8A94C0127A404674D5320472889BDBF2C41A2EF44A24995273E1FE5B3EB36E7D63F06B
Reporter abuse_ch
Tags:Dridex exe

Intelligence

File Origin
# of uploads :
2
# of downloads :
114
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Variant.Razy.668085.29374.13821.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-07 18:21:25 UTC
AV detection:
28 of 31 (90.32%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=5ct2ljytmmibpup33wuppnl44623nmx2qb5gtjzm7upsst4przcq._file
Verdict:
malicious
Label(s):
dridex
Create hunting rule
Similar samples:
0a383870010db689605e8aac2fd1a9ad284558ef9eccc6d07bdc9dbbc573480f
Dridex
19042ea0e61783a3c281e3f02e0e2e2b07e9421bae0afeeae21febe450510f0c
Dridex
4655c0216538f752dea2ce1649807d597cd83a935f1385bdd8f418616de97b68
Dridex
5ade0c4492ffe4b77776543635a5cad0eef6d4a207f69dac0a59f9ad76aa42ba
Dridex
660a91641b6c4ba3b9d0b3273b318b51314cfc67c8f5f0e4ca20a2e0932329a7
Dridex
ab44ef41e492f3df1be566ddde081d666b3e9f55ee6f0f195fe0acd4d9701912
Dridex
d3e9f6933d519b6bd1514ceaaa14df64722214c0c6c2a60a6924c92f284b3c08
Dridex
d62a40010c67fd83e79a6307c7be774a26ddf38f05c71785936227f3b6882584
Dridex
d77234374d79b24022c26ecdd16a684ae7e94efba502422d74852b0eddd4f1b4
Dridex
fcd9abcb235ec7aea9a425394952653a57b44ba9233e934289d2b6892fac82b2
Dridex
+ 103 additional samples on MalwareBazaar
Result
Malware family:
dridex
Create hunting rule
Score:
  10/10
Tags:
family:dridex botnet loader
Link:
https://tria.ge/reports/201109-qtlcl8j4ha/
Behaviour
Dridex Loader
Dridex
Malware Config
C2 Extraction:
87.98.218.33:443
54.38.143.246:691
159.65.79.173:3886
153.122.13.133:1443
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments