MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f60fce8cf1824e48cc479d3258e20c3c083e6a2f4cb7fa98a5d09c21281813d9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Matiex


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f60fce8cf1824e48cc479d3258e20c3c083e6a2f4cb7fa98a5d09c21281813d9
SHA3-384 hash: f58a83f94b39e909d6fb0a033c10da129307d0ec646304b6fd556201b4e62237a6f19385caa80f63aff5682c2a0306b1
SHA1 hash: 7593faa23100cc752897aa0d77e5858d3c29d331
MD5 hash: 30f13311b12bfe59d83b247af8f7edb1
humanhash: solar-pennsylvania-vegan-delta
File name:invoice _25280.zip
Download: download sample
Signature Matiex
Create hunting rule
File size:701'001 bytes
First seen:2020-10-12 05:49:25 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:vzCesbmuJzS0JGZMIzxkntOvmMOHvmyTjVQuFpO/1ZS/T/OCSZIS7kNqT6d6n:vUTzS0JtIzKAv5oNTj3FpONZW/OCWmng
TLSH 5CE4235996FA1F972B3301989113AF90BBBEC699C4A10FB10072F0E8453C7365EEA51F
Reporter abuse_ch
Tags:geo ITA Matiex zip


Avatar
abuse_ch
Malspam distributing Matiex:

HELO: dd35620.kasserver.com
Sending IP: 85.13.152.153
From: Banca Credito Italiano - Unicredit Group <info@maler-fuhrmann-schmidt.de>
Reply-To: snambrath.almandoos@bk.ru
Subject: Re: Payments - October Invoices
Attachment: invoice _25280.zip (contains "invoice _25280.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f60fce8cf1824e48cc479d3258e20c3c083e6a2f4cb7fa98a5d09c21281813d9/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-12 02:16:39 UTC
AV detection:
13 of 48 (27.08%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=6yh45dhrqjhertchtuzfryqmhqed42rpjs37vgff2cocckaycpmq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.82
Link:
https://yomi.yoroi.company/submissions/f60fce8cf1824e48cc479d3258e20c3c083e6a2f4cb7fa98a5d09c21281813d9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Matiex

zip f60fce8cf1824e48cc479d3258e20c3c083e6a2f4cb7fa98a5d09c21281813d9

(this sample)

Matiex

Executable exe 859fc8e7cbbba010c53cc2243f5d6c0b5ff9bea3a4e7df40e48eea523b4650d4

  
Dropping
MD5 cee02cb2b40bae87a1d52ab0e8647b36
  
Dropping
Matiex
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 859fc8e7cbbba010c53cc2243f5d6c0b5ff9bea3a4e7df40e48eea523b4650d4

Comments