MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 644bb4e213cdafabbd952c5c6310a98aa8b25f9ebcf157ba4eb27826216a38b8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 644bb4e213cdafabbd952c5c6310a98aa8b25f9ebcf157ba4eb27826216a38b8
SHA3-384 hash: 500aff1c59665622239e329c58b8eac96c87278d8801adcf540f32ffd4c0cfe7cfd33265a6fdee3f4e39bbe5f85c9b18
SHA1 hash: e1d2c4aebe566e10cd815dd522db3ebcc72a8547
MD5 hash: 980534ea6a2a890a3d33eba6b9f05ee1
humanhash: oklahoma-arizona-lithium-jersey
File name:413110_201005200740.pdf.rar
Download: download sample
Signature Matiex
Create hunting rule
File size:99'525 bytes
First seen:2020-10-08 12:41:02 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 1536:GUYk1ZXVpjI5adbylxPngMYmHxmpqF8WcdN6HOAhyDK+SJVONr1Wrm+L:FXdfMQbgxPgMYmRE//dEH5x+SJVr/L
TLSH 17A312B64F6437C2E07B0FE8BD8AD90E2F9AD545A684D0D8C174DE8277D5A3B4B70808
Reporter abuse_ch
Tags:GarantiBBVA geo Matiex rar TUR


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: hosted-by.rootlayer.net
Sending IP: 185.222.57.209
From: Garanti BBVA Internet <dekont@garantibbva.com.tr>
Subject: DEKONT
Attachment: 413110_201005200740.pdf.rar (contains "413110_201005200740.pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
90
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/644bb4e213cdafabbd952c5c6310a98aa8b25f9ebcf157ba4eb27826216a38b8/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-08 10:15:00 UTC
AV detection:
22 of 48 (45.83%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=mrf3jyqtzwx2xpmvfroggefjrkulex46xtyvposowj4cmilkhc4a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Eldorado
Score:
0.90
Link:
https://yomi.yoroi.company/submissions/644bb4e213cdafabbd952c5c6310a98aa8b25f9ebcf157ba4eb27826216a38b8

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip 644bb4e213cdafabbd952c5c6310a98aa8b25f9ebcf157ba4eb27826216a38b8

(this sample)

Matiex

Executable exe 8adc83591c26ae2a90982a1d19b837137d61898c2891b4b572e12804595def72

  
Dropping
MD5 f7a8b40a603e34ba1d54432963f39836
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8adc83591c26ae2a90982a1d19b837137d61898c2891b4b572e12804595def72

Comments