MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 719138b15e50e6e78d95f2d93f8e62ce92d9baa667dce0008eafe6923f563e64. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 719138b15e50e6e78d95f2d93f8e62ce92d9baa667dce0008eafe6923f563e64
SHA3-384 hash: 4cd74d54964966c49dbce9c296f3e7a20b8c46b632cf2dcbe25ca64f7bd88bccb6b663551de200f814d5422e8bbef1b9
SHA1 hash: 1d66411672601173073725a9b2fcfc9c16a5d3f4
MD5 hash: 94577e506f1c72e77ada49d471a07321
humanhash: iowa-cup-aspen-iowa
File name:invoice _25280.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:702'348 bytes
First seen:2020-10-12 08:38:35 UTC
Last seen:2020-10-12 14:55:59 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:JOnDaGdMIHPll0XKwDAeE6Fhg/pX0oqD9SMz8uZU8xYlXKETudomvKmsueOi+XHV:JkDrH4JGrX0BJxUUYUeIPKSl
TLSH 19E433A44871FF6488EC279AAD25D20D2CDC421507FEB577D5EB918EE0C08F4CD6A8B6
Reporter _Clevero
Tags:Matiex zip


Avatar
_Clevero
Sending IP: 85.13.138.236
Sender FROM: Bank Payment <rechnung@lebensgemeinschaft-wickersdorf.de>
Sender SMTP: rechnung@lebensgemeinschaft-wickersdorf.de
Subject: payment
Attachments: Payment.zip, invoice _25280.zip
Recipient: info@

Intelligence

File Origin
# of uploads :
2
# of downloads :
93
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/719138b15e50e6e78d95f2d93f8e62ce92d9baa667dce0008eafe6923f563e64/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-12 08:40:08 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ogitrmk6kdtopdmv6lmt7dtcz2jntovgm7ooaaeov7tjep2whzsa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.66
Link:
https://yomi.yoroi.company/submissions/719138b15e50e6e78d95f2d93f8e62ce92d9baa667dce0008eafe6923f563e64

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip 719138b15e50e6e78d95f2d93f8e62ce92d9baa667dce0008eafe6923f563e64

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments