MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4a4f5c58a37ecb13eee6e0c49037006ae06bbd1486f6d8fbed8cc5060c226976. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4a4f5c58a37ecb13eee6e0c49037006ae06bbd1486f6d8fbed8cc5060c226976
SHA3-384 hash: ddca839f1f59f9b7d29fad1b48cf690a2e1fdecf90c3cdc278a2e0d59abb06df340a978c27e55b3c81c4266d54a93fa1
SHA1 hash: bbd867d5f97c77a769b2d964217df1bcdbcf636d
MD5 hash: 8f733260c9547c1aaab9fa3885a4547a
humanhash: alpha-triple-kilo-moon
File name:08000990800pdf.z
Download: download sample
Signature Matiex
Create hunting rule
File size:541'162 bytes
First seen:2020-08-11 14:05:45 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:rkZkpuqSSHrjYTetB66dV4XWkK4EmMfTQ+hbK6/CihYt1KpUsHyOngKcsX/gLrv6:rmwZjYTa66j8MTQ4bH/b0cXnVvgLrIF
TLSH C2B4235F3F8E382BB98758FFC0F6AA3ABE510404BB391054D16DCE891912939F366917
Reporter abuse_ch
Tags:ESP geo Matiex z


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: somosindustria.com
Sending IP: 45.137.22.52
From: sales@somosindustria.com
Subject: Reconfirmar los datos bancarios contra la factura
Attachment: 08000990800pdf.z (contains "08000990800.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4a4f5c58a37ecb13eee6e0c49037006ae06bbd1486f6d8fbed8cc5060c226976/
Threat name:
ByteCode-MSIL.Trojan.CryptInject
Create hunting rule
Status:
Malicious
First seen:
2020-08-11 14:07:06 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=jjhvywfdp3frh3xg4dcjanyanlqgxpiuq33nr67nrtcqmdbcnf3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/4a4f5c58a37ecb13eee6e0c49037006ae06bbd1486f6d8fbed8cc5060c226976

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

z 4a4f5c58a37ecb13eee6e0c49037006ae06bbd1486f6d8fbed8cc5060c226976

(this sample)

Matiex

Executable exe 20404bc0e463cc7474976cf7a83de3e892570bb0aae22d404259d2b157dc3ff9

  
Dropping
MD5 f9b1140593e95614c357a719893ca50e
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 20404bc0e463cc7474976cf7a83de3e892570bb0aae22d404259d2b157dc3ff9

Comments