MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 baccdfce4faac4a7dd3090031d02bc49536b668040122a186bd45743ecee3016. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: baccdfce4faac4a7dd3090031d02bc49536b668040122a186bd45743ecee3016
SHA3-384 hash: 26c4eb1a39dc53f42d29ebeb3c0eed994042a051b978bc7f6560121e3864c7c04d4fb9746140d005e810ec12f8abf380
SHA1 hash: 74e1b96baa9caa743c51b37f19b8317aecb5f3b3
MD5 hash: bd3b2a2a8d8f9289d35c2632f1a30bdb
humanhash: triple-mountain-sad-mobile
File name:NedBank POP.rar
Download: download sample
Signature Matiex
Create hunting rule
File size:758'033 bytes
First seen:2020-10-26 15:49:22 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:vHsG0zEze4YPMvOMSjwN3vy2wXk+8JzkoY8qgwTrtRHBCUSYK4:PszCetMxvyJU1klgitRHBCj8
TLSH 5BF423EF50DFE966058A8BC093743E3500236378DA7FA19A5D6E2170C187DAF21A73D2
Reporter abuse_ch
Tags:Matiex rar


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: in-mum-m43.icewarpcloud.in
Sending IP: 103.110.83.80
From: Manager <shekhar@atzshipping.com>
Reply-To: <dieu.phan@pvpaint-vn.com>
Subject: RE: PO# CPOR-2169 // Invoice SMI/728// 77
Attachment: NedBank POP.rar (contains "NedBank POP.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/baccdfce4faac4a7dd3090031d02bc49536b668040122a186bd45743ecee3016/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-26 09:58:40 UTC
AV detection:
5 of 48 (10.42%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=xlgn7tspvlckpxjqsabr2av4jfjwwzuaiajcugdl2rluh3hogala._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/baccdfce4faac4a7dd3090031d02bc49536b668040122a186bd45743ecee3016

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

rar baccdfce4faac4a7dd3090031d02bc49536b668040122a186bd45743ecee3016

(this sample)

Matiex

Executable exe d3e028f9373813729e7f0baf6ff01f7a1aa925eea965a4499ec1575b3d21456f

  
Dropping
MD5 bf004cc1c6e6a5f5f3f9d4d3a9517751
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d3e028f9373813729e7f0baf6ff01f7a1aa925eea965a4499ec1575b3d21456f

Comments