General
- Target 2f677e930c980bdc2d858e7e9d19041638a575e2edcf5ad6b88503251c4b739e
- Size 537KB
- Sample220508-t92y5aceh5
- SHA256 2f677e930c980bdc2d858e7e9d19041638a575e2edcf5ad6b88503251c4b739e
- MD5 daaea507a91d60d4f3181affc9d2ffeb
- SHA1 1bcba07eefde83737919533ce77c477e0b10dda0
- SHA512 2f98f0ab1548026ce3e3f3b413f80efe62cbf3a7a99668c44a35be5140de5b78131c347ca3af1bd4ac90d78e73e64ac5358e0daafc40ebb902597c092ee06e53
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
2f677e930c980bdc2d858e7e9d19041638a575e2edcf5ad6b88503251c4b739e.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
matiex
Credentials
-
Protocol
smtp
-
Host
srvc13.turhost.com
-
Port
587
-
Username
-
Password
italik2015
Targets
-
- Target 2f677e930c980bdc2d858e7e9d19041638a575e2edcf5ad6b88503251c4b739e
- Size 537KB
- SHA256 2f677e930c980bdc2d858e7e9d19041638a575e2edcf5ad6b88503251c4b739e
- MD5 daaea507a91d60d4f3181affc9d2ffeb
- SHA1 1bcba07eefde83737919533ce77c477e0b10dda0
- SHA512 2f98f0ab1548026ce3e3f3b413f80efe62cbf3a7a99668c44a35be5140de5b78131c347ca3af1bd4ac90d78e73e64ac5358e0daafc40ebb902597c092ee06e53
- MD5 SHA1 SHA512
Matiex Main Payload
Suspicious use of SetThreadContext