MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5db167e8cc20f6b5d34a37383cc5c9299a40624073be1f8ebab5420975a39313. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5db167e8cc20f6b5d34a37383cc5c9299a40624073be1f8ebab5420975a39313
SHA3-384 hash: b490e6b14c787d21ee20d5a77565616cf230bd5992b2361d3ca60cb10f6fd154c8dab00eb50060f4190bcead06530bf7
SHA1 hash: 9f502a4c6f6cc9170199b8a19ae1f781e8116d5b
MD5 hash: c99a302039cf1d86ca16653df4d8ac1a
humanhash: social-mobile-one-batman
File name:M097508E2-20F2-4C2C-879A.rar
Download: download sample
Signature Matiex
Create hunting rule
File size:266'810 bytes
First seen:2020-10-16 13:46:18 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:OHuJWX2K65ZKYDhFu5YfdGeTe0w/fVPT6ZRlLtxdiVhUe/XujFdyJw5DhFu:HWGJhFumfoBt/VTOLXdAp/XuPyGRu
TLSH 8844130EC516A6493CA3A2C8323EB3437F9BC61EA563AFF3C49F56B200E2559571543E
Reporter abuse_ch
Tags:Matiex rar


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: hosted-by.rootlayer.net
Sending IP: 185.222.57.209
From: emendez@farwestcorrosion.com
Subject: PURCHASE ORDER ( INVOICE) URGENT!!!
Attachment: M097508E2-20F2-4C2C-879A.rar (contains "M097508E2-20F2-4C2C-879A.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Generic.mg.13f08d08bbaa99bf.32653.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5db167e8cc20f6b5d34a37383cc5c9299a40624073be1f8ebab5420975a39313/
Threat name:
Win32.Trojan.Zenpak
Create hunting rule
Status:
Malicious
First seen:
2020-10-16 05:52:07 UTC
AV detection:
13 of 48 (27.08%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=lwywp2gmed3llu2kg44dzrojfgneaysaoo7b7dv2wvbas5ndsmjq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/5db167e8cc20f6b5d34a37383cc5c9299a40624073be1f8ebab5420975a39313

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip 5db167e8cc20f6b5d34a37383cc5c9299a40624073be1f8ebab5420975a39313

(this sample)

Matiex

Executable exe d32af58205d0773daf139d13738f918e03f4d30439086b6eda0dfceef3369b58

  
Dropping
MD5 13f08d08bbaa99bfd4cf481cf682bd7d
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d32af58205d0773daf139d13738f918e03f4d30439086b6eda0dfceef3369b58

Comments