matanbuchus | 8140ac01ec377af7788eddd79d665d5000b34e7d064499b96c9d540582b28913 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Yukoste3.ocx
Size 522KB
Sample211214-we54eahbgj
SHA256 8140ac01ec377af7788eddd79d665d5000b34e7d064499b96c9d540582b28913
MD5 67d5dfcde8225a0cdf760d833ca44387
SHA1 9db7b3f5c7cff58d8a06f2f4cc82d9f7339f49e1
SHA512 1436c7b1b3168c93d185d86ed375ce8cd45a77c3135a27f68cb8b0aa7cf06a5ba7e05c688d2602d3bba2e73f811c13ab222f37d5fd4df4ad78561d35048e3fb8
MD5 SHA1 SHA512

Score

10^/10

matanbuchus loader

Malware Config

Extracted

Family

matanbuchus

C2

https://belialq449663.at/f5126584-3f68-4e0c-868a-dcb2455f8146/Y2xpbnRvbjQ1.xml
https://belialw869367.at/f5126584-3f68-4e0c-868a-dcb2455f8146/Y2xpbnRvbjQ1.xml
https://beliale232634.at/b0868b6b-7f2c-4ac6-ba54-ba9b13744d17/clinton45.xml
https://belialr878539.at/b0868b6b-7f2c-4ac6-ba54-ba9b13744d17/clinton45.xml
https://belialp632298.at/b0868b6b-7f2c-4ac6-ba54-ba9b13744d17/clinton45.xml

Targets

- Target
  Yukoste3.ocx
- Size 522KB
- SHA256 8140ac01ec377af7788eddd79d665d5000b34e7d064499b96c9d540582b28913
- MD5 67d5dfcde8225a0cdf760d833ca44387
- SHA1 9db7b3f5c7cff58d8a06f2f4cc82d9f7339f49e1
- SHA512 1436c7b1b3168c93d185d86ed375ce8cd45a77c3135a27f68cb8b0aa7cf06a5ba7e05c688d2602d3bba2e73f811c13ab222f37d5fd4df4ad78561d35048e3fb8
- MD5 SHA1 SHA512
Score

10^/10

matanbuchus loader
- Matanbuchus
  A loader sold as MaaS first seen in February 2021.
  loader matanbuchus
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

matanbuchusloader

behavioral2

matanbuchusloader