MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dfdb9aeba0e9dde76e05e6dfe2f70d220a544355337472b86131281367118b46. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dfdb9aeba0e9dde76e05e6dfe2f70d220a544355337472b86131281367118b46
SHA3-384 hash: f13ffd284218042c744186cfde8bdcfc21856079f5d90621b3f943bb592f212eba05132af9c407bb0698aef85437c49a
SHA1 hash: 3760752c7b4b941c948b43e5945be5c00d0084b5
MD5 hash: f8825c5d5854a5a88d9a120a51fc86a1
humanhash: apart-item-sierra-spaghetti
File name:NEW ORDER.pdf.z
Download: download sample
Signature Matiex
Create hunting rule
File size:324'802 bytes
First seen:2020-08-03 07:30:21 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:80ZsYNjdfenundv1Bqp3hqDH3uv0E6bz0j+xCnlfLEmy3tqkg0tW:80ZvNJfpXMpIjuMBCZntwdqkhtW
TLSH DF64230AF01DE2CF4C2EA0ED7C97E75DA05DA62F7882AD329D7F155908B466B9037122
Reporter abuse_ch
Tags:Matiex z


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: biz.vnpt.vn
Sending IP: 37.48.83.10
From: Acount Director <kieu.lt@biz.vnpt.vn>
Subject: NEW ORDER
Attachment: NEW ORDER.pdf.z (contains "NEW ORDER.pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/dfdb9aeba0e9dde76e05e6dfe2f70d220a544355337472b86131281367118b46/
Threat name:
Win32.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-03 07:32:06 UTC
AV detection:
21 of 48 (43.75%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=37nzv25a5ho6o3qf43p6f5yneiffiq2vgn2hfodbgeubgzyrrnda._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/dfdb9aeba0e9dde76e05e6dfe2f70d220a544355337472b86131281367118b46

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

z dfdb9aeba0e9dde76e05e6dfe2f70d220a544355337472b86131281367118b46

(this sample)

Matiex

Executable exe ed7fa775e6484fee75934743e821a3a050e35831a0574685fb124a3e4766a85a

  
Dropping
MD5 c1a3f8fc5a754f5a9e6165b2c01c91de
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ed7fa775e6484fee75934743e821a3a050e35831a0574685fb124a3e4766a85a

Comments