MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d6cc26090184738bc0af6fc4962ef79065c7906326f29b23761e699f8e59b872. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d6cc26090184738bc0af6fc4962ef79065c7906326f29b23761e699f8e59b872
SHA3-384 hash: 20f98b4e10e6333511aee7547dff15c3c228897ee9924ecc650d171901f36274292b76402684edad2d32e3b2443166a3
SHA1 hash: 5d97bd35c7fb609357070af78fbf7ee392409c8a
MD5 hash: 599fa4800a705f0a95927e2d1340c73d
humanhash: fix-bulldog-eleven-march
File name:URGENT.PO.pdf.z
Download: download sample
Signature Matiex
Create hunting rule
File size:479'426 bytes
First seen:2020-07-31 06:13:14 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:KkeYUm7V9BGtlob1udsjw1rJbCvdtYdiUN1qe+Ft9c:KuUmR9Qt4k3RiAv+Rc
TLSH 8DA423BFA8A05B756C00BE4358CA4EEE0934554887A44D6942F2EC7673B4DF72913AF3
Reporter abuse_ch
Tags:z


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mantires.com
Sending IP: 37.48.85.246
From: Muhammad<Muhammad@mantires.com>
Subject: RFQ (URGENT)
Attachment: URGENT.PO.pdf.z (contains "URGENT.PO.pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d6cc26090184738bc0af6fc4962ef79065c7906326f29b23761e699f8e59b872/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-30 14:08:07 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=23gcmcibqrzyxqfpn7cjmlxxsbs4pedde3zjwi3wdzuz7dszxbza._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/d6cc26090184738bc0af6fc4962ef79065c7906326f29b23761e699f8e59b872

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

z d6cc26090184738bc0af6fc4962ef79065c7906326f29b23761e699f8e59b872

(this sample)

Matiex

Executable exe 45a2796fe63b4de3b22f992d5259ca8efdf22d33670c5446a71d288d9f182ef5

  
Dropping
MD5 c934ff92eb72cb2a4a7e3beebe46c07c
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 45a2796fe63b4de3b22f992d5259ca8efdf22d33670c5446a71d288d9f182ef5

Comments