MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a4c832d2df84b3c31d5d1daf2f02c3e48e9f4b3b6f5d2032bb2fc425c662de66. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a4c832d2df84b3c31d5d1daf2f02c3e48e9f4b3b6f5d2032bb2fc425c662de66
SHA3-384 hash: 5cb7bd8f7f13a3af883be8b7b0c813264abd1142c92770a1be3a38e54a17f1cf85c7b7cb5bac1cbafe5c9d94f3efa8f9
SHA1 hash: ecb30ed714f3c83df8bf9c01afb1469215d60473
MD5 hash: f03f3613e088aed817c2085cea98a629
humanhash: oregon-wisconsin-failed-jersey
File name:DHL Shipment Info.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:559'902 bytes
First seen:2020-09-01 05:07:40 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:S+teUBOsdUuKb6Zks0g5C/l5xdZqrPwnzeROoPs5YjBNRecC8qB:1eTs2vGWs0g50lvdZ4Yn9AcYjnRLhc
TLSH D2C423503BA2BF19CF0F99FFDD0AFB8C5D0685C66F9A1095958E7601B2517EE0E8C128
Reporter abuse_ch
Tags:DHL Matiex zip


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: mta1.donyc3.chereemail.com
Sending IP: 134.209.43.91
From: DHL Customer Support <dhlexpress@webemailoffice.com>
Reply-To: info@marketinfosales.com
Subject: DHL Shipment Notification
Attachment: DHL Shipment Info.zip (contains "DHL Shipment Info.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
95
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.W32.Trojan-7.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a4c832d2df84b3c31d5d1daf2f02c3e48e9f4b3b6f5d2032bb2fc425c662de66/
Threat name:
ByteCode-MSIL.Trojan.Taskun
Create hunting rule
Status:
Suspicious
First seen:
2020-08-30 23:38:25 UTC
AV detection:
8 of 48 (16.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=utedfuw7qsz4ghk5dwxs6awd4shj6sz3n5osamv3f7cclrtc3zta._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.45
Link:
https://yomi.yoroi.company/submissions/a4c832d2df84b3c31d5d1daf2f02c3e48e9f4b3b6f5d2032bb2fc425c662de66

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip a4c832d2df84b3c31d5d1daf2f02c3e48e9f4b3b6f5d2032bb2fc425c662de66

(this sample)

Matiex

Executable exe 6438b80d095ec295859cb2b1c099f1ae2ac0485705a447b991e84b551e40047e

  
Dropping
MD5 c25c9e302e3bbc669e210c961e271f2e
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6438b80d095ec295859cb2b1c099f1ae2ac0485705a447b991e84b551e40047e

Comments