MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7c4826075a6c00a34aa7a3a38f9faddefc33ce1e623ba583573f3ffc666b5218. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7c4826075a6c00a34aa7a3a38f9faddefc33ce1e623ba583573f3ffc666b5218
SHA3-384 hash: 76d17a5c923956d32b3464b0dab8b1ab48c67a5cebe4ae3428c02aabf5040b633cce7f04321fe0b1bb62ead1d61cdbcf
SHA1 hash: 13adbf9e9b17721a669bd162c2b0102a6bdc5e4f
MD5 hash: 35f71ff782a8061948a8c36f6565c700
humanhash: magnesium-missouri-hydrogen-vermont
File name:Payment 1.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:701'143 bytes
First seen:2020-10-12 06:17:49 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:ibcyUa3GTwRf7xRnpeWEm4aR1MGh+8OhYBWL5H7GbLVUgKjGd1mHJufcXY31knqq:QGTmFlRSGDrBW1HiKj2mHJJC18T9FD
TLSH 41E42389B472A36015D8E8FA20854F1B22A43F5EF17D54BB3D8B2543CCECA39D415B7A
Reporter abuse_ch
Tags:Matiex zip


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: dd17920.kasserver.com
Sending IP: 85.13.138.236
From: Bank Payment <info@lebensgemeinschaft-wickersdorf.de>
Subject: payment
Attachment: Payment 1.zip (contains "Payment.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
88
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7c4826075a6c00a34aa7a3a38f9faddefc33ce1e623ba583573f3ffc666b5218/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-12 03:30:30 UTC
AV detection:
8 of 48 (16.67%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=precmb22nqakgsvhuory7h5n336dhtq6mi52la2xh477yztlkima._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/7c4826075a6c00a34aa7a3a38f9faddefc33ce1e623ba583573f3ffc666b5218

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip 7c4826075a6c00a34aa7a3a38f9faddefc33ce1e623ba583573f3ffc666b5218

(this sample)

Matiex

Executable exe 8b11730282a37ee753b8ee3505ec791433e757a30d3631ca2319749395a778bb

  
Dropping
MD5 0d54a1b384e0efea51f444796575204e
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8b11730282a37ee753b8ee3505ec791433e757a30d3631ca2319749395a778bb

Comments