MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5e17eb054fdd11f124f33dab985b6c19453f326513f8571db2ce25f0bf52dce1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5e17eb054fdd11f124f33dab985b6c19453f326513f8571db2ce25f0bf52dce1
SHA3-384 hash: d7265e9cc99b61054ad1acaaf6fb1c468b9a653944e720202f379f770d43c67fba2366383b43128e15e624635cea1d8c
SHA1 hash: b11b644da2303eac702a93b3e2454e1028b2b81c
MD5 hash: 138148e9001855318a98c6407f12f67b
humanhash: stream-winter-mirror-lima
File name:PO.z
Download: download sample
Signature Matiex
Create hunting rule
File size:310'930 bytes
First seen:2020-07-31 12:17:35 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:jN+bbddiI9cLPigeSFkDvVR5dUv2e0kNLuuoUlxiN7s:jN+bbddH9cLPigeS+NSv2e0C6uoc
TLSH EF6423EA856414397AC2ACB0D654C32B61C8AF7ED7F1A6BC1223D49B0672A9B35705CC
Reporter abuse_ch
Tags:Matiex z


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: ismarine.com.tr
Sending IP: 62.232.216.219
From: Express ADG <EXPRESS_ADG@ismarine.com.tr>
Subject: Urgent Request for Invoice
Attachment: PO.z (contains "PO.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5e17eb054fdd11f124f33dab985b6c19453f326513f8571db2ce25f0bf52dce1/
Threat name:
Win32.Trojan.DataStealer
Create hunting rule
Status:
Malicious
First seen:
2020-07-31 12:19:12 UTC
AV detection:
16 of 48 (33.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=lyl6wbkp3ui7cjhthwvzqw3mdfct6mtfcp4fohnszys7bp2s3tqq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/5e17eb054fdd11f124f33dab985b6c19453f326513f8571db2ce25f0bf52dce1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

z 5e17eb054fdd11f124f33dab985b6c19453f326513f8571db2ce25f0bf52dce1

(this sample)

Matiex

Executable exe e3d23bafecccf8c1282d7c7f561490061216edabbbdafde8dca65608ba28a8fc

  
Dropping
MD5 829316dec0bd0d3ae1a0d7dba9aa96fe
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e3d23bafecccf8c1282d7c7f561490061216edabbbdafde8dca65608ba28a8fc

Comments