MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4feebde6967128bd3d1e0d3c19e9508cf5314c521fce66a6aa3c79f4802223cb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4feebde6967128bd3d1e0d3c19e9508cf5314c521fce66a6aa3c79f4802223cb
SHA3-384 hash: 63540469b09a8830ce0d7b16cbb4614bd5f31967bc2375bf9e998b10ac91990cdab842abed91dc3b3740d4d475eca316
SHA1 hash: 1ab9e7ddcbf32cf18cdba33fb93b03af1899e8c4
MD5 hash: 3fe12264c89022d8a2efe2a93bb9145c
humanhash: mexico-emma-snake-fruit
File name:BL Original AWB Shipping documents1.rar
Download: download sample
Signature Matiex
Create hunting rule
File size:348'469 bytes
First seen:2020-08-04 16:23:38 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:/Yd72WYROkDPfKFqu6bzAPY041bl+40Ph1M1k1gCHq2E6S/pfSj9diO1KLVC5rJi:wd72WYlDnKEhbi0l+403CCHnSUoOoirA
TLSH 75742364151830D547A339F9F34E2235D72CDAB82E69500D2BE6F04CA86C7C3BAD6CE2
Reporter abuse_ch
Tags:DHL Matiex rar


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: noway.com
Sending IP: 45.127.62.50
From: DHL Express Service<dhlexpress@dhl.com>
Subject: DHL International Express Shipping AWB and parcel tracking-523***75
Attachment: BL Original AWB Shipping documents1.rar (contains "BL & Original AWB Shipping documents.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4feebde6967128bd3d1e0d3c19e9508cf5314c521fce66a6aa3c79f4802223cb/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-04 16:25:05 UTC
AV detection:
21 of 48 (43.75%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=j7xl3zuwoeul2pi6bu6bt2kqrt2tctcsd7hgnjvkhr47jabcepfq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/4feebde6967128bd3d1e0d3c19e9508cf5314c521fce66a6aa3c79f4802223cb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

rar 4feebde6967128bd3d1e0d3c19e9508cf5314c521fce66a6aa3c79f4802223cb

(this sample)

Matiex

Executable exe 1973b3eff839047a3a75d58777161e58b49fbbbd9255966bd74add7a93507bc3

  
Dropping
MD5 1f3af4b1178773cdd98f752b8149cac3
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1973b3eff839047a3a75d58777161e58b49fbbbd9255966bd74add7a93507bc3

Comments