MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 85fb9b1955422d32927b178fe5218a3e265dae8292f2d62cc6945f8a61cc9c2a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 85fb9b1955422d32927b178fe5218a3e265dae8292f2d62cc6945f8a61cc9c2a
SHA3-384 hash: ad7cdf76927d286f9330ef3397080c5a5a4d71dcaa7231413b4f9bd051e74b8702f0d1d67611ed97a3d8aa332b2ac6c1
SHA1 hash: f3e1ca28e044af89e0050535769019dc7f056e72
MD5 hash: fea301ccb50a9c26386547bbb55ede67
humanhash: white-alabama-sodium-nineteen
File name:Payment_Zahlung.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:682'834 bytes
First seen:2020-10-09 15:42:24 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:fuahN+jAvUhTRV3iv+IUkDp3CO0G5lKB/msbVwD8GAA+KFZeifZHLXUk:fuahoJ9VSWIxVSBmsbVczXreiR7Uk
TLSH 56E4238BE406C4654B63C50168E90A49EFE4B7A2C6FB4F2FF3212E49E1141AA3D45FD7
Reporter abuse_ch
Tags:Matiex zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mailserver.suifgrup.ro
Sending IP: 3.123.89.79
From: Accounts & Billing Department <info@landhotel-gary.de>
Reply-To: biuro.polsensor@outlook.com
Subject: Re: Zahlung - Invoices
Attachment: Payment_Zahlung.zip (contains "Payment_Zahlung.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
132
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/85fb9b1955422d32927b178fe5218a3e265dae8292f2d62cc6945f8a61cc9c2a/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-09 13:02:24 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=qx5zwgkviiwtfet3c6h6kimkhytf3lucslznmlggsrpyuyomtqva._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/85fb9b1955422d32927b178fe5218a3e265dae8292f2d62cc6945f8a61cc9c2a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip 85fb9b1955422d32927b178fe5218a3e265dae8292f2d62cc6945f8a61cc9c2a

(this sample)

Matiex

Executable exe aba7c1c07ed945bc78f128ced4eef1c58253a55e6d31395228322281e791a15f

  
Dropping
MD5 c339a87d14ca18f321687c6dc658fd53
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 aba7c1c07ed945bc78f128ced4eef1c58253a55e6d31395228322281e791a15f

Comments