General
-
Target
b577138111c80cdcde338683038c04be.exe
-
Size
1.7MB
-
Sample
220321-jxpsxsaecm
-
MD5
b577138111c80cdcde338683038c04be
-
SHA1
d4a9804675c85b1a7ac28858e6fb8cdd92018e23
-
SHA256
31211fd1239d9e0de50a1af9ad1e71a55be0dac1e55e06444d2537caa96bd0c6
-
SHA512
78de0e55882061f05dfb9ad20a023b05cf7e58f53873eceff90b271957bfc0b1b6f3a1e9820fb20bcf3621de726043c1e519af42349d2312f093432377586d83
Static task
static1
Behavioral task
behavioral1
Sample
b577138111c80cdcde338683038c04be.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
b577138111c80cdcde338683038c04be.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
matiex
Protocol: smtp- Host:
ebop.website - Port:
587 - Username:
[email protected] - Password:
P@ssw0rdP@ssw0rd
Targets
-
-
Target
b577138111c80cdcde338683038c04be.exe
-
Size
1.7MB
-
MD5
b577138111c80cdcde338683038c04be
-
SHA1
d4a9804675c85b1a7ac28858e6fb8cdd92018e23
-
SHA256
31211fd1239d9e0de50a1af9ad1e71a55be0dac1e55e06444d2537caa96bd0c6
-
SHA512
78de0e55882061f05dfb9ad20a023b05cf7e58f53873eceff90b271957bfc0b1b6f3a1e9820fb20bcf3621de726043c1e519af42349d2312f093432377586d83
Score10/10-
Matiex Main Payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-