MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e9b3b04a100743999604de3bac9da0c68b624799d6a368ee36f9dd788f47f5b5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e9b3b04a100743999604de3bac9da0c68b624799d6a368ee36f9dd788f47f5b5
SHA3-384 hash: 834d3cbc9bc3cf77099dabaddf35223b7e7f37175fcf68ba86aff93adfd56daf7b5f5cc50b1f903f3e2fb0503a895930
SHA1 hash: 1936dcce02974b80d8913df1c83abe7d232c6e4e
MD5 hash: ec3b3a6e4797d144c8d57560f58a5492
humanhash: july-cardinal-shade-twelve
File name:APS-4234776.IMG
Download: download sample
Signature Matiex
Create hunting rule
File size:1'245'184 bytes
First seen:2020-08-03 07:04:18 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:DZnVKDTViiHWs0H/3b6Wx/wtmqOFOUW3WoXR2G:544isf3bXot2CWe2
TLSH FA458D62A6F0C536C1272A3C9D5B6774DC29BF007A68A8767FF91C4C4F3968138E9193
Reporter abuse_ch
Tags:img Matiex


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: alkuhaimi.com
Sending IP: 37.48.85.240
From: Accounts Department <rud-division@alkuhaimi.com>
Subject: PROFORMA INVOICE
Attachment: APS-4234776.IMG (contains "bosssman.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Rogue.0hr.20200803-0406.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e9b3b04a100743999604de3bac9da0c68b624799d6a368ee36f9dd788f47f5b5/
Threat name:
Win32.Trojan.Skeeyah
Create hunting rule
Status:
Malicious
First seen:
2020-08-03 07:06:07 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=5gz3asqqa5bztfqe3y52zhnay2fwer4z22rwr3rw7hoxrd2h6w2q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/e9b3b04a100743999604de3bac9da0c68b624799d6a368ee36f9dd788f47f5b5

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

img e9b3b04a100743999604de3bac9da0c68b624799d6a368ee36f9dd788f47f5b5

(this sample)

Matiex

Executable exe 94d2d1aeebeff231fe2536de9f0d7eb42f80686b30ee6a54e3019670f381b943

  
Dropping
MD5 4f338356047edd4cb0539e2cf2f578c4
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 94d2d1aeebeff231fe2536de9f0d7eb42f80686b30ee6a54e3019670f381b943

Comments