General
-
Target
Yukoste3.ocx
-
Size
522KB
-
Sample
211214-we54eahbgj
-
MD5
67d5dfcde8225a0cdf760d833ca44387
-
SHA1
9db7b3f5c7cff58d8a06f2f4cc82d9f7339f49e1
-
SHA256
8140ac01ec377af7788eddd79d665d5000b34e7d064499b96c9d540582b28913
-
SHA512
1436c7b1b3168c93d185d86ed375ce8cd45a77c3135a27f68cb8b0aa7cf06a5ba7e05c688d2602d3bba2e73f811c13ab222f37d5fd4df4ad78561d35048e3fb8
Malware Config
Extracted
matanbuchus
https://belialq449663.at/f5126584-3f68-4e0c-868a-dcb2455f8146/Y2xpbnRvbjQ1.xml
https://belialw869367.at/f5126584-3f68-4e0c-868a-dcb2455f8146/Y2xpbnRvbjQ1.xml
https://beliale232634.at/b0868b6b-7f2c-4ac6-ba54-ba9b13744d17/clinton45.xml
https://belialr878539.at/b0868b6b-7f2c-4ac6-ba54-ba9b13744d17/clinton45.xml
https://belialp632298.at/b0868b6b-7f2c-4ac6-ba54-ba9b13744d17/clinton45.xml
Targets
-
-
Target
Yukoste3.ocx
-
Size
522KB
-
MD5
67d5dfcde8225a0cdf760d833ca44387
-
SHA1
9db7b3f5c7cff58d8a06f2f4cc82d9f7339f49e1
-
SHA256
8140ac01ec377af7788eddd79d665d5000b34e7d064499b96c9d540582b28913
-
SHA512
1436c7b1b3168c93d185d86ed375ce8cd45a77c3135a27f68cb8b0aa7cf06a5ba7e05c688d2602d3bba2e73f811c13ab222f37d5fd4df4ad78561d35048e3fb8
Score10/10-
Matanbuchus
A loader sold as MaaS first seen in February 2021.
-