MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fcc0db0ce710f68915b4d73274d69bb5765012b02631bb737c66a32a9a708aab. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Dridex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: fcc0db0ce710f68915b4d73274d69bb5765012b02631bb737c66a32a9a708aab
SHA3-384 hash: c21f409086e9374ceb3d973f381e627e50c48fb2686a636243750f727a16ba46d17145cf774ab70a81e10143bcb63622
SHA1 hash: 32fb4b06125adca7c4efa5b10ce7d9ae628e0b8a
MD5 hash: cab22dc868f772cb746ea8108db12050
humanhash: india-six-hawaii-hamper
File name:okasle.exe
Download: download sample
Signature Dridex
File size:200'704 bytes
First seen:2020-07-02 17:34:50 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 138d7cf0cff2a37eaef02b9f85e3c81b (6 x Dridex)
ssdeep 6144:lqWuU/QvBeWgUCFWK9QL5ipw99NaML6Ez:AoQRQF7+cyvN8
Threatray 78 similar samples on MalwareBazaar
TLSH BA140213362E60DDE22ABC70B11AEE1957006CA99559C647AA8E3FDB1C3BE815C21377
Reporter abuse_ch
Tags:Dridex exe


Avatar
abuse_ch
Dridex payload URL:
http://luyitaw.com/okasle.exe

Intelligence


File Origin
# of uploads :
1
# of downloads :
263
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Infostealer.Dridex
Status:
Malicious
First seen:
2020-07-02 17:35:22 UTC
AV detection:
26 of 29 (89.66%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Dridex

Executable exe fcc0db0ce710f68915b4d73274d69bb5765012b02631bb737c66a32a9a708aab

(this sample)

  
Delivery method
Distributed via web download

Comments