MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 36b528e4f6149823bcc3309fe9a95334ea98c14037dfe95dd1d68b506eb4962e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 36b528e4f6149823bcc3309fe9a95334ea98c14037dfe95dd1d68b506eb4962e
SHA3-384 hash: 4b7e80db930fbaef236be40e9ee4fc4c9d031743bd0ac63923c6997abffdd2674edc990fed9433c2c921b400f64d7c85
SHA1 hash: ee2b4ab4853d1aa869a4f15d609114e72d48bc1b
MD5 hash: 3bbb7e0b352bfabb26d5cc6e3b6b0326
humanhash: black-winter-pip-sad
File name:Quotation 257439.rar
Download: download sample
Signature Matiex
Create hunting rule
File size:287'243 bytes
First seen:2020-08-16 13:56:28 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:8b+5Efd2cb4w8dQJ4e2YSkKkbs3OpMH+I0hdrDtFt:8qefdl4MjHHxgeAJIvt
TLSH 245423FA9785F92D9EB121574A4E5CEF92F1542F80E42738BB368C106096C60384FADF
Reporter abuse_ch
Tags:Matiex rar


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: SADEEMRDP
Sending IP: 37.48.83.6
From: Ahmed Hassan <expdoc@kgmlogistics.com>
Subject: Re:New Quotation
Attachment: Quotation 257439.rar (contains "Quotation #257&439.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
89
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/36b528e4f6149823bcc3309fe9a95334ea98c14037dfe95dd1d68b506eb4962e/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-16 13:58:06 UTC
AV detection:
18 of 48 (37.50%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=g22srzhwcsmchpgdgcp6tkktgtvjrqkag7p6sxor22fva3vusyxa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/36b528e4f6149823bcc3309fe9a95334ea98c14037dfe95dd1d68b506eb4962e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

rar 36b528e4f6149823bcc3309fe9a95334ea98c14037dfe95dd1d68b506eb4962e

(this sample)

Matiex

Executable exe f8113167cfaf623d5c08b33685577743fb96bd3daca2cd915d8b3efe81ad3a8b

  
Dropping
MD5 78ecb4ae45b1ac19a3f0295811eacea0
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f8113167cfaf623d5c08b33685577743fb96bd3daca2cd915d8b3efe81ad3a8b

Comments