MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 32588e55c0fc5d7552671ac94915f5431066897fb292c1e6c0d61df34dd88465. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 32588e55c0fc5d7552671ac94915f5431066897fb292c1e6c0d61df34dd88465
SHA3-384 hash: 169a01ece3a3f43e76f0f44012955f932b6c18d208cdc07a2ca7c4e7cecb49ea921b8d6b2ec055b71234ef50b0afc078
SHA1 hash: 3a7042b6d884cb95fd6d67c5ee1e845c3852f22a
MD5 hash: 2a2f255cc7f3ca3dec1811700ead9b54
humanhash: orange-aspen-may-mirror
File name:Payment_Invoice.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:708'976 bytes
First seen:2020-10-07 12:13:44 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:v2KpFwynN18s2Xt8IXYqAQ6lhutgwooWVXJm4fIG3NuCb0+51shrM4T3TkQg:vhxP8L8ItEuWwohcEfAhr5T3zg
TLSH 28E433389766BAEC16FC5EEB8D43150D2BC6DBFD822D21742821DDD87187126CA1738E
Reporter abuse_ch
Tags:Matiex zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: dd17118.kasserver.com
Sending IP: 85.13.137.241
From: kontakt@bmw-motorbikeparts.de
Subject: Re: Payment
Attachment: Payment_Invoice.zip (contains "Payment_Invoice.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
105
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/32588e55c0fc5d7552671ac94915f5431066897fb292c1e6c0d61df34dd88465/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-07 07:59:56 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=gjmi4voa7roxkuthdleusfpvimigncl7wkjmdzwa2yo7gtoyqrsq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/32588e55c0fc5d7552671ac94915f5431066897fb292c1e6c0d61df34dd88465

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip 32588e55c0fc5d7552671ac94915f5431066897fb292c1e6c0d61df34dd88465

(this sample)

Matiex

Executable exe f77d55bfcc19a624e22ed3c7beb0e9c1cd20066d29845d8c05daed5f0559c8be

  
Dropping
MD5 545dfffaf5845991912d52d171a4b566
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f77d55bfcc19a624e22ed3c7beb0e9c1cd20066d29845d8c05daed5f0559c8be

Comments