MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3667609f0c24ab6f0f752272d3912979fb5a589c0e067d09279947d5852adfd6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3667609f0c24ab6f0f752272d3912979fb5a589c0e067d09279947d5852adfd6
SHA3-384 hash: 63fc275671a4a1d658b78045a9bb25e59c609f7a2cc59e75f348e48be8ba56c5dfaf28cae62093ed600ab834fd4d9811
SHA1 hash: 98ebee7100c4453cb3bb517ef9e6d4d705e8d95c
MD5 hash: a2fba1dec44bfa5b15766e018b35869c
humanhash: fanta-east-bluebird-mike
File name:kart bilgisizzz.z
Download: download sample
Signature Matiex
Create hunting rule
File size:542'903 bytes
First seen:2020-12-28 10:37:13 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:j7xo5Xy/12hHs6mOGsOoe/YTNPXZZjkA56KvuTA0mbVrudx26:Pxo5i/ASz8O2Nfvu00mbFuQ6
TLSH 0BB423F785C4426246D312EF1E91BFE1C124A838A991C11FEF24C576DFE8AB61FC8905
Reporter abuse_ch
Tags:geo Matiex TUR z


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: hosted-by.rootlayer.net
Sending IP: 45.137.22.52
From: QNB Finansbank E-Ekstre<ekstre@eekstre.qnbfinansbank.com>
Subject: CardFinans KOBİ Visa Kasım ayi ekstreniz.
Attachment: kart bilgisizzz.z (contains "kart bilgisizzz.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
373
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Generic.mg.e403224181d35975.263.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3667609f0c24ab6f0f752272d3912979fb5a589c0e067d09279947d5852adfd6/
Threat name:
Win32.Trojan.Pwsx
Create hunting rule
Status:
Malicious
First seen:
2020-12-28 10:38:05 UTC
AV detection:
10 of 48 (20.83%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=gztwbhymesvw6d3vejznhejjph5vuwe4bydh2cjhtfd5lbjk37la._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/3667609f0c24ab6f0f752272d3912979fb5a589c0e067d09279947d5852adfd6

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip 3667609f0c24ab6f0f752272d3912979fb5a589c0e067d09279947d5852adfd6

(this sample)

Matiex

Executable exe 4c56e5f1863de0fa8fa4f2104de8d14a695eaa7e61158a71aeabef051cc025b1

  
Dropping
MD5 e403224181d35975467c43df34caaf3b
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4c56e5f1863de0fa8fa4f2104de8d14a695eaa7e61158a71aeabef051cc025b1

Comments