MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ccb31439442084b3d2f386d8868c7e3ebc10d78d67b3841daf7f8268f0ca8af5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ccb31439442084b3d2f386d8868c7e3ebc10d78d67b3841daf7f8268f0ca8af5
SHA3-384 hash: 05ff0275b70ea6f6fedb8c155fa31aceb3834ef9ae42c72e55dc8c98255f551b8d04b4044c59c992d9269d5b2872fbda
SHA1 hash: 5ee86ee1f9ef330115d9562e997bfdb128603b0c
MD5 hash: a36cafe77b649ec9cbb99b9bd271955b
humanhash: alabama-double-robin-magazine
File name:mmmomoioo.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:197'320 bytes
First seen:2020-10-10 17:55:23 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:5x5hAhHhw/03Y4HAM8x6en8shi6VjIbE5:5x5hARhAzM8x5n3hHVkb+
TLSH 3E1423CF984CE9937C1E2782EF477F45BE274A7697838924A12A7543582D31B3B1290F
Reporter abuse_ch
Tags:Matiex zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: hosted-by.rootlayer.net
Sending IP: 185.222.57.209
From: Leticia Cruz Gutierrez <sumintern@prodigy.net.mx>
Subject: ORDEN DE COMPRA
Attachment: mmmomoioo.zip (contains "mmmomoioo.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
143
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ccb31439442084b3d2f386d8868c7e3ebc10d78d67b3841daf7f8268f0ca8af5/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-10 01:47:57 UTC
AV detection:
32 of 48 (66.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=zszriokeecclhuxtq3mindd6h26bbv4nm6zyihnpp6bgr4gkrl2q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Zbot
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/ccb31439442084b3d2f386d8868c7e3ebc10d78d67b3841daf7f8268f0ca8af5

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip ccb31439442084b3d2f386d8868c7e3ebc10d78d67b3841daf7f8268f0ca8af5

(this sample)

Matiex

Executable exe 624d8606b6fadc7aa8b9cbb72a12338fce28325f9bc849a78a5f91147f36c844

  
Dropping
MD5 c28eaefb9f817f6300d3b339cb078d04
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 624d8606b6fadc7aa8b9cbb72a12338fce28325f9bc849a78a5f91147f36c844

Comments