MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0db83f951cd91e31097d69a68a6a9e1c801180ca161c7024b665eb2d5422c316. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0db83f951cd91e31097d69a68a6a9e1c801180ca161c7024b665eb2d5422c316
SHA3-384 hash: 7123847f5ff466df47c8efdc0f039b30ece5892eb2ada399177b036916d6bb37c2efa20503562af255ca1de7986ce10d
SHA1 hash: a4e1f3855bee1ca715990f81df4a92df4837c1a7
MD5 hash: 6fea872ab5569ca220ae658a3b0b8184
humanhash: william-tango-maryland-queen
File name:PO.z
Download: download sample
Signature Matiex
Create hunting rule
File size:324'832 bytes
First seen:2020-08-03 06:56:08 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:vEp7qgzPDPGTkYk9ahqDH3uZDl5AdItr+ODVcv6/tM3NIXSz/BgODy:vMXLEMjuZbAdItr+Qcut++m/6ODy
TLSH 9764230FFC0444CC5B9DC6A1813C2A5C81FB1D0221B6B0AF1A5C774A9FAF7266659BED
Reporter abuse_ch
Tags:Matiex z


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: ismarine.com.tr
Sending IP: 62.232.216.219
From: Express ADG <EXPRESS_ADG@ismarine.com.tr>
Subject: Urgent Request for Invoice
Attachment: PO.z (contains "PO.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0db83f951cd91e31097d69a68a6a9e1c801180ca161c7024b665eb2d5422c316/
Threat name:
Win32.Trojan.LokiBot
Create hunting rule
Status:
Malicious
First seen:
2020-08-03 06:58:07 UTC
AV detection:
19 of 48 (39.58%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=bw4d7fi43epdccl5ngtiu2u6dsabdagkcyohajfwmxvs2vbcymla._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/0db83f951cd91e31097d69a68a6a9e1c801180ca161c7024b665eb2d5422c316

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

z 0db83f951cd91e31097d69a68a6a9e1c801180ca161c7024b665eb2d5422c316

(this sample)

Matiex

Executable exe a97aec67e2a556ec45ea8aa3db146d119d39b14486db55ad5b930f8295eccfae

  
Dropping
MD5 c30c5dfe0e3c434a2bee493ed9637d23
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a97aec67e2a556ec45ea8aa3db146d119d39b14486db55ad5b930f8295eccfae

Comments