MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 ffc72cf208affc2124c51dc37b3bdf91a76641f1db388e607dbc7a7a3f2b9c0e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | ffc72cf208affc2124c51dc37b3bdf91a76641f1db388e607dbc7a7a3f2b9c0e |
|---|---|
| SHA3-384 hash: | 6a931a58861d72d24e9f07d44bd5d450a8306ea15feb36fddf866d1b6fac24af0c5f126f4635e3e65b8190e295bfc1e3 |
| SHA1 hash: | 66d1c8afa63dcbb7a6f55e51e8a65c24ea70583f |
| MD5 hash: | b4e4008bacac620597a691993e017dc6 |
| humanhash: | nineteen-delaware-london-five |
| File name: | b4e4008bacac620597a691993e017dc6.exe |
| Download: | download sample |
| File size: | 196'608 bytes |
| First seen: | 2020-11-28 11:21:47 UTC |
| Last seen: | 2020-11-28 12:44:52 UTC |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 5da19dcc64b843868370fc6bfebaf47e (3 x Dridex) |
| ssdeep | 3072:PUKnIavARia3SsHlptUEb1Z+MfYwbKLIMr2b7XFTfnyrvsr:PrnvvARmsH1Zxfzmv2vFTarq |
| TLSH | 9114021947C4B3BED768B53FB596CC31D3B0B2898ABCCA37AB2DD4415916207E81761C |
| Reporter |  abuse_ch |
| Tags: | exe |
Intelligence
File Origin
# of uploads :
2
# of downloads :
188
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Result
Verdict:
Clean
Maliciousness:
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
56 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
PE file contains section with special chars
Behaviour
Behavior Graph:
Threat name:
Win32.Infostealer.Dridex
Status:
Malicious
First seen:
2020-11-27 21:22:30 UTC
AV detection:
19 of 29 (65.52%)
Threat level:
5/5
Unpacked files
SH256 hash:
ffc72cf208affc2124c51dc37b3bdf91a76641f1db388e607dbc7a7a3f2b9c0e
MD5 hash:
b4e4008bacac620597a691993e017dc6
SHA1 hash:
66d1c8afa63dcbb7a6f55e51e8a65c24ea70583f
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Dridex
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe ffc72cf208affc2124c51dc37b3bdf91a76641f1db388e607dbc7a7a3f2b9c0e
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.