MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b6dfdc4fe65881c1ad7044b7c8062fbb074886517af5b2bc207c7f12ad1e9b98. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Matiex


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: b6dfdc4fe65881c1ad7044b7c8062fbb074886517af5b2bc207c7f12ad1e9b98
SHA3-384 hash: 271e4794ae6004b17b05c23afbfb7d318e0513fc27291431baee1d8e52a4cad5738127464b19871b7b40962614f3d435
SHA1 hash: fb8f71a007aff17b96bb596960e32c5d8c5b0083
MD5 hash: 805f7174df87507f68e7ed0b35488a95
humanhash: alpha-lactose-bluebird-maine
File name:DEKONT.rar
Download: download sample
Signature Matiex
File size:556'691 bytes
First seen:2020-10-27 10:07:46 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:woHDA2iNKrNcwyU70BYHXuHSh+H4Db8B/TOINOAQh0QAmiSXK3i:bH0LeNWUgKHXuyTUTlsAfQPiSP
TLSH 44C423DA2D7833F191EC518F18AC4999D026C68088D06DBE6BF3EA57866F2B053CC759
Reporter abuse_ch
Tags:geo Matiex rar TUR


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: server.elmasgrafik.com
Sending IP: 185.48.182.122
From: Administrator <accounts@ri-ca.org>
Reply-To: saleslink@yandex.com
Subject: DEKONT
Attachment: DEKONT.rar (contains "DEKONT.exe")

Intelligence


File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip b6dfdc4fe65881c1ad7044b7c8062fbb074886517af5b2bc207c7f12ad1e9b98

(this sample)

  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment

Comments