MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 da08b2d07e1b6ddbaeeee47d0b67bf19f73418113af94874b6cb6184a5f47f1e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: da08b2d07e1b6ddbaeeee47d0b67bf19f73418113af94874b6cb6184a5f47f1e
SHA3-384 hash: 705531828cc1753ee2b8eecbf118ffcf71a2ca320db6f309395dc5ace1270b1d4d7e4fccd7f9f3dea89e717719258b5e
SHA1 hash: 618477eb49373b40417837294742e26e703ab85e
MD5 hash: eec028f8ca010dd9cbd9fb80ddec6dee
humanhash: india-beer-double-oscar
File name:aICimr3gAHz4gx6 .rar
Download: download sample
Signature Matiex
Create hunting rule
File size:985'235 bytes
First seen:2020-10-20 07:25:47 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:JPFJ980yE0N1hSmwBi3PMvsHM/HW93gAbAYp40:JPr98hpaBkPMvPuiAbx40
TLSH D625339A89E942A3EF03BDCD1F27AA1340EF98904D1CFB4E95619F7F90186D316D0299
Reporter abuse_ch
Tags:Matiex rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: server.elmasgrafik.com
Sending IP: 185.48.182.122
From: financierocvc@gmail.com
Subject: FACTURA DE PAGO
Attachment: aICimr3gAHz4gx6 .rar (contains "aICimr3gAHz4gx6.com")

Intelligence

File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/da08b2d07e1b6ddbaeeee47d0b67bf19f73418113af94874b6cb6184a5f47f1e/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-19 22:30:27 UTC
AV detection:
22 of 28 (78.57%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3ielfud6dnw5xlxo4r6qwz57dh3tigarhl4uq5fwznqyjjpup4pa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.61
Link:
https://yomi.yoroi.company/submissions/da08b2d07e1b6ddbaeeee47d0b67bf19f73418113af94874b6cb6184a5f47f1e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip da08b2d07e1b6ddbaeeee47d0b67bf19f73418113af94874b6cb6184a5f47f1e

(this sample)

Matiex

Executable exe 522fd7ca621387362eb8122f195c78ffa6124a5b3d5415717ff856b91fca430f

  
Dropping
MD5 9276601508a998aa3152add2207c9abf
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 522fd7ca621387362eb8122f195c78ffa6124a5b3d5415717ff856b91fca430f

Comments