MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7f1949b61c8727e782c3f2cb7aafe7b062e92dc6dca20dab8a0cf03ea6cbeca7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7f1949b61c8727e782c3f2cb7aafe7b062e92dc6dca20dab8a0cf03ea6cbeca7
SHA3-384 hash: 146e841be299b8ec6d178dad7b701baccaacf034bf77daf72abafd5e134a8fc164438f366e532e070d2f2dff9f015265
SHA1 hash: 380da0f31a5981b5155597e409820080d09aa2a4
MD5 hash: 1095828301dd1c188aa266ce3915d7a5
humanhash: seven-wyoming-red-jupiter
File name:T.HALK BANKASI A.S...17.08.2020 Hesap Ekstresi.z
Download: download sample
Signature Matiex
Create hunting rule
File size:435'087 bytes
First seen:2020-08-17 18:04:41 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:oK8KPTptuLHu9uZM3tbiW/2G70thLMgfQIP3zpjGgnO:oK17ptEO9uZM3MW+GoPLVP39je
TLSH 2C9423F8C91ED5A741AEF5E09195D6CD24808B24A9D9FE3C6E00B0FE7E966A130CCD74
Reporter abuse_ch
Tags:geo Halkbank Matiex TUR z


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: e-posta.albarakaturk.com.tr
Sending IP: 185.222.57.209
From: bilgi@e-posta.albarakaturk.com.tr
Subject: T.HALK BANKASI A.S. 17.08.2020 Hesap Ekstresi
Attachment: T.HALK BANKASI A.S...17.08.2020 Hesap Ekstresi.z (contains "T.HALK BANKASI A.S...17.08.2020 Hesap Ekstresi.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Artemis3F20D10FE2E1.30258.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7f1949b61c8727e782c3f2cb7aafe7b062e92dc6dca20dab8a0cf03ea6cbeca7/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-08-17 18:06:08 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=p4mutnq4q4t6pawd6lfxvl7hwbroslog3sra3k4kbtyd5jwl5stq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/7f1949b61c8727e782c3f2cb7aafe7b062e92dc6dca20dab8a0cf03ea6cbeca7

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip 7f1949b61c8727e782c3f2cb7aafe7b062e92dc6dca20dab8a0cf03ea6cbeca7

(this sample)

Matiex

Executable exe 3f7f872fea7066d980a443d82e9ec8c3c97fddd2f658b24919589bbdf4de1bcc

  
Dropping
MD5 3f20d10fe2e1bc476bf1b6d4465e71eb
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3f7f872fea7066d980a443d82e9ec8c3c97fddd2f658b24919589bbdf4de1bcc

Comments