Extracted

Extracted

• • Target

    NKP210102-NIT-SC2.exe

  • Size

    779KB

  • MD5

    087dfca6f2b2c9825a49d4b986d7f539

  • SHA1

    748e44b93cf2882248b2e27c728eb11018984bf4

  • SHA256

    af8629a317a5fe7aa5900f445cd855b902a495c497646c3ef1485ea5a9d026a7

  • SHA512

    25ab703c8261e1c36e4656b405b2aff6c8595bc26fe3b0f982e7249a90d6d6405d5f66ff8c28f8696d16c99a479718657dc669e0e4e5c2abe00e3ea03bac588d

  Score

  10^/10

  matiexcollectionkeyloggerstealer

  • Matiex

    Matiex is a keylogger and infostealer first seen in July 2020.

    stealerkeyloggermatiex

  • Matiex Main Payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2