MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d62e5588104e9d208f853bbaabeea5b1df14b09195d947e6ee7dfb08a34e1108. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d62e5588104e9d208f853bbaabeea5b1df14b09195d947e6ee7dfb08a34e1108
SHA3-384 hash: 4243b3eef3f5635487c36dcafd12634b7b75904fbae84e3f9ed957bccc422e1e6f616a1d63dd27bf1078820bdebf8a18
SHA1 hash: 0de5f5ca372591f91e8f200cf8331189904284a7
MD5 hash: 89559cc619abbfde40c72db4a8480d5a
humanhash: single-ten-april-mountain
File name:909000865438.uu
Download: download sample
Signature Matiex
Create hunting rule
File size:36'682 bytes
First seen:2020-10-12 14:49:16 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 768:A2hnXzG68E49yYF0CJh7yd2oHB2lKhW8JNWoLZwrspZltXDfTtUOC:pG68ECly4oHB2lmWGrasTfXDfu
TLSH 45F2F1A6E2FD3D8DEF999EB8C479AB4C46263208C134F7A59D6752DC31824CD4BCC588
Reporter abuse_ch
Tags:Matiex uu


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: hosted-by.rootlayer.net
Sending IP: 185.222.57.209
From: financierocvc@gmail.com
Subject: Revised PI/NEW ORDER
Attachment: 909000865438.uu (contains "909000865438 (1).exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
111
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Mal.Generic-S.32356.22639.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d62e5588104e9d208f853bbaabeea5b1df14b09195d947e6ee7dfb08a34e1108/
Threat name:
ByteCode-MSIL.Trojan.Ymacco
Create hunting rule
Status:
Malicious
First seen:
2020-10-12 10:47:31 UTC
AV detection:
14 of 48 (29.17%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=2yxflcaqj2osbd4fho5kx3vfwhprjmersxmupzxopx5qri2oceea._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/d62e5588104e9d208f853bbaabeea5b1df14b09195d947e6ee7dfb08a34e1108

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip d62e5588104e9d208f853bbaabeea5b1df14b09195d947e6ee7dfb08a34e1108

(this sample)

Matiex

Executable exe c1a61a6e688452c5bd61bc2dc2779348efb4544f2f5023a62601b41370ccc898

  
Dropping
MD5 3a398a4b69fb1cad1a17e09f36cf6c77
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c1a61a6e688452c5bd61bc2dc2779348efb4544f2f5023a62601b41370ccc898

Comments