MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c8b25c2fc6c9731d530675041fab524ab494261931e25c01a6b95424ff5c4dbf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c8b25c2fc6c9731d530675041fab524ab494261931e25c01a6b95424ff5c4dbf
SHA3-384 hash: 2c8718d96bf0870c4711389a70eaeae630671f597e43acc203a318bb0a54f0a97859efe7fe97e67ffef18a2f94627a90
SHA1 hash: c61fe6d3edb30e0734f2ac51c1b56b3cca24032e
MD5 hash: 85decea94568cdedef35efc23129b9de
humanhash: item-mexico-monkey-emma
File name:AGENCY APPIONTMENT.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:1'595'071 bytes
First seen:2020-11-07 11:25:49 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 49152:ugkx+Xl8ETBs/tVgtsbUAAvmU/XZQIwR3o1XbXiCDzZBAO:vXlStoskZjwFuH
TLSH 0475338E3CFE96AE0B17F524DC451543C73CB89AB4B54831ADE4B33D647E8249A0E972
Reporter abuse_ch
Tags:Matiex zip


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: server12.prohoster.gr
Sending IP: 185.138.42.78
From: Bernadette Dela Cruz <sales@pinmaryachtsupply.com>
Reply-To: shnshipping@gmail.com
Subject: PDA. REQUEST
Attachment: AGENCY APPIONTMENT.zip (contains "Yypj3oQhoEyU6X2.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c8b25c2fc6c9731d530675041fab524ab494261931e25c01a6b95424ff5c4dbf/
Threat name:
ByteCode-MSIL.Spyware.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-11-07 10:38:21 UTC
AV detection:
18 of 29 (62.07%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=zczfyl6gzfzr2uygoucb7k2sjk2jijqzghrfyangxfkcj724jw7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip c8b25c2fc6c9731d530675041fab524ab494261931e25c01a6b95424ff5c4dbf

(this sample)

Matiex

Executable exe e0ecb16b450cfcfecdc7f258bfc5597a5718101ac97627018b2846f9c95e18b3

  
Dropping
MD5 38cbc8e70e940bb8005cb9f0fbe8c8ad
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e0ecb16b450cfcfecdc7f258bfc5597a5718101ac97627018b2846f9c95e18b3

Comments