MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9cef9e0b819b0c7211063be4d6c0883cbcad9ef671570e604929f284f233b230. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9cef9e0b819b0c7211063be4d6c0883cbcad9ef671570e604929f284f233b230
SHA3-384 hash: b2c1ac18fa60a206f41bbda52b03ae8f9693cb205dbefe336ec79e546dfbf6a70fb4f9eafcede676e641418e960f63d1
SHA1 hash: c2631f7db5d93fc9d76a7ed6dbf036bf443e5e88
MD5 hash: 0272d3a8b6253feb56bd9968c08e5621
humanhash: mango-jig-delaware-golf
File name:NedBank POP 2.rar
Download: download sample
Signature Matiex
Create hunting rule
File size:718'813 bytes
First seen:2020-10-27 12:50:49 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:zKv3ZentKg2DVDcuaf72o4KzCOhn4IhocEDoICFYidxignEwgcDoOfZvfCmw0WX5:zZth6cuafV3u4IaXdQgKNOBvKD07N0b
TLSH 8CE4232DEA044F62A91122B05328B7788D8773F83F674AD8DD2281F909D53D076B5DBB
Reporter abuse_ch
Tags:Matiex rar


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: in-mum-m43.icewarpcloud.in
Sending IP: 103.110.83.80
From: Manager <shekhar@atzshipping.com>
Reply-To: <dieu.phan@pvpaint-vn.com>
Subject: outstanding payment.
Attachment: NedBank POP 2.rar (contains "NedBank POP.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
94
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9cef9e0b819b0c7211063be4d6c0883cbcad9ef671570e604929f284f233b230/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-27 09:36:08 UTC
AV detection:
9 of 48 (18.75%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ttxz4c4btmgheeighpsnnqeihs6k3hxwoflq4ycjfhzij4rtwiya._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/9cef9e0b819b0c7211063be4d6c0883cbcad9ef671570e604929f284f233b230

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

rar 9cef9e0b819b0c7211063be4d6c0883cbcad9ef671570e604929f284f233b230

(this sample)

Matiex

Executable exe c3cd64158186a1d2e0bb0ae12e6b8a4e8a371f59d8c6d80e97d96f8c63c67a55

  
Dropping
MD5 c0e3c373bcc484c5b70d1bd2d8401081
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c3cd64158186a1d2e0bb0ae12e6b8a4e8a371f59d8c6d80e97d96f8c63c67a55

Comments