MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 41919b19a6fb7a73d1464f42acd3991e15cdfff9414a25fc59cd844ff01f4c8f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 41919b19a6fb7a73d1464f42acd3991e15cdfff9414a25fc59cd844ff01f4c8f
SHA3-384 hash: 879dd844f0f02dd334fd8be4a756b89621e9aa03a7cc44599a96fbda86753ec17dc4abed97f77293a414acdf9064fd1a
SHA1 hash: a4fd94c861a8be8e48498153d961479d5c4ae680
MD5 hash: 63f03276f59cf510aa449deafc654399
humanhash: apart-illinois-aspen-kitten
File name:Docs.rar
Download: download sample
Signature Matiex
Create hunting rule
File size:430'132 bytes
First seen:2020-10-26 10:14:46 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:5ayOWukyT2YBvCn3yKxWjx0B7MFKoYjv3UHvCCnK0mPsHTDnU5IukYS7EykbG0hx:5ay2TY17jTjU6CzmEI5FpU0xA6zLxV7B
TLSH 64942346F73B588AA14936E6DACB71961738B6F40B9C7A54CCDC4C38B0DA5BC2899C4C
Reporter abuse_ch
Tags:Matiex rar


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: fe2.orangefm.linkdatacenter.net
Sending IP: 41.128.142.69
From: DOCS <fkhalifa@link.net>
Reply-To: fkhalifa@link.net
Subject: FW: DOCUMENTS
Attachment: Docs.rar (contains "Docs.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/41919b19a6fb7a73d1464f42acd3991e15cdfff9414a25fc59cd844ff01f4c8f/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-25 17:54:39 UTC
AV detection:
12 of 27 (44.44%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=igizwgng7n5hhukgj5bkzu4zdyk4377ziffcl7czzwce74a7jshq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

rar 41919b19a6fb7a73d1464f42acd3991e15cdfff9414a25fc59cd844ff01f4c8f

(this sample)

Matiex

Executable exe fc7470a56409ddacd8078e88cc72f63d87a0fdf42d986f13d27a0c961d78884d

  
Dropping
MD5 373f65405eeef7c6445eaac150f5a88a
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fc7470a56409ddacd8078e88cc72f63d87a0fdf42d986f13d27a0c961d78884d

Comments