MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9ff047b1f3fdd19a29b1bc6639fdee89037d1ffdda63aedfb819bc9804632423. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9ff047b1f3fdd19a29b1bc6639fdee89037d1ffdda63aedfb819bc9804632423
SHA3-384 hash: 354be3de8c3e3c9ca60c634e5528650ecedb7890a3efa9785e46347e0846c8b6fb2d9a966cd9b80d2f715e200514ad0b
SHA1 hash: 91fb382753a46037121b9913b5836e9f49a42d99
MD5 hash: ac1a65c9d1b72af15dda0465f5b7a48b
humanhash: tennis-triple-glucose-uncle
File name:INV3390876214_GU74-1.IMG
Download: download sample
Signature Matiex
Create hunting rule
File size:1'638'400 bytes
First seen:2020-10-14 15:03:10 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:HvBTBxNYtFP2jVgGG390wqF/Vd6FmQT3ej3TK:LkwVKcb61Eu
TLSH 82757AA4750F6CC8DA7B427C09C2E1B38EF535622350F65B1CE856DBCEA10653B87C9A
Reporter abuse_ch
Tags:img Matiex


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: atl4mhob24.registeredsite.com
Sending IP: 209.17.115.121
From: info <info@echoproducts.com>
Reply-To: info <info@echoproducts.com>
Subject: Fw: Shams Inv Confirmation INV#3390876214_GU74-1
Attachment: INV3390876214_GU74-1.IMG (contains "INV#3390876214_GU74-1.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9ff047b1f3fdd19a29b1bc6639fdee89037d1ffdda63aedfb819bc9804632423/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-13 19:07:38 UTC
AV detection:
14 of 48 (29.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=t7yepmpt7xizuknrxrtdt7porebx2h753jr25x5ydg6jqbddeqrq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/9ff047b1f3fdd19a29b1bc6639fdee89037d1ffdda63aedfb819bc9804632423

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

img 9ff047b1f3fdd19a29b1bc6639fdee89037d1ffdda63aedfb819bc9804632423

(this sample)

Matiex

Executable exe 512b2f1f4b659930900abcc8f51d175e88c81b0641b7450a6618b77848fa3b40

  
Dropping
MD5 43fca1d8939949f3e3757f87360fd983
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 512b2f1f4b659930900abcc8f51d175e88c81b0641b7450a6618b77848fa3b40

Comments