Extracted

• • Target

    f158a1e36c936286a10c2a463439b7d8b16271ca16838cc92ff2219541ecc8e8

  • Size

    595KB

  • MD5

    e6bab12c7456216175a7ed7598d39b02

  • SHA1

    525990e346d2708da8ef38dd0254e49f2c3330b6

  • SHA256

    f158a1e36c936286a10c2a463439b7d8b16271ca16838cc92ff2219541ecc8e8

  • SHA512

    b90c9d3e55b48d42e165bbe9d12217d2d4c31bcce5ec2590fd2bfb26e068d5dd8d8515eaa6b5e5b98f26e2066142c2a432bbea7ad1f955dfc9a916e3da98dcad

  Score

  10^/10

  matiexcollectionkeyloggerstealer

  • Matiex

    Matiex is a keylogger and infostealer first seen in July 2020.

    stealerkeyloggermatiex

  • Matiex Main Payload

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2