MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bc31fc4bea86c69967c99b00e5e465c27c4712fcc2a7ea737a1d449185e84a28. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bc31fc4bea86c69967c99b00e5e465c27c4712fcc2a7ea737a1d449185e84a28
SHA3-384 hash: ccf8fe4855f8acbaba049363559a3283b5142196a6f2d4808d25edf8fcbf812052c8df8b6191ad1a1ed6f49504edb6b4
SHA1 hash: 23190f3616ed41932ad6330f7fbc8b398fd75c83
MD5 hash: 56936382515bb9c6fe8c9c555ada7ec4
humanhash: arkansas-moon-cold-rugby
File name:004797508E2-20F2-4C2C-879A-1C358609BA01d.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:203'830 bytes
First seen:2020-10-16 12:39:20 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 3072:wqOliXcsuIs84lR+0LQKc5p6VkJlBBp6hvSUYEIqEIp3U153INr4Z2Cw6dHIGtgo:ea9+R+0LQKrVI4v9Y0q5i0ZX8b4
TLSH 7C1413EAD27DB1853303E17543850EA645A69D23954BFE0EFDB9EECC8CA39935503E08
Reporter abuse_ch
Tags:Matiex zip


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: hosted-by.rootlayer.net
Sending IP: 185.222.57.209
From: emendez@farwestcorrosion.com
Subject: PURCHASE ORDER ( INVOICE) URGENT!!!
Attachment: 004797508E2-20F2-4C2C-879A-1C358609BA01d.zip (contains "004797508E2-20F2-4C2C-879A-1C358609BA01d.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bc31fc4bea86c69967c99b00e5e465c27c4712fcc2a7ea737a1d449185e84a28/
Threat name:
Win32.Trojan.Zenpak
Create hunting rule
Status:
Malicious
First seen:
2020-10-16 03:59:02 UTC
AV detection:
26 of 48 (54.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=xqy7ys7kq3djsz6jtmaolzdfyj6eoex4ykt6u432dvcjdbpijiua._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/bc31fc4bea86c69967c99b00e5e465c27c4712fcc2a7ea737a1d449185e84a28

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip bc31fc4bea86c69967c99b00e5e465c27c4712fcc2a7ea737a1d449185e84a28

(this sample)

Matiex

Executable exe 4a40496f800e2a11c1e2a12176d062b59fe536f18fb236f98e66231448aaa2e8

  
Dropping
MD5 77622db39954d9de5f409d926e2291f4
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4a40496f800e2a11c1e2a12176d062b59fe536f18fb236f98e66231448aaa2e8

Comments