Extracted

• • Target

    Quotation #257&439.exe

  • Size

    330KB

  • MD5

    78ecb4ae45b1ac19a3f0295811eacea0

  • SHA1

    3fae2cdcbfa40c6937be2b84e4f0044c9efcacc6

  • SHA256

    f8113167cfaf623d5c08b33685577743fb96bd3daca2cd915d8b3efe81ad3a8b

  • SHA512

    dea32cc4e7515b271a5ba8094a955577ab3f0f115654afa70e984da104a2061e3016c847952b3a8a57d363b919a61f1a39a2945dab5da9008283bcb1a2f18a8b

  Score

  10^/10

  matiexkeyloggerstealer

  • Matiex

    Matiex is a keylogger and infostealer first seen in July 2020.

    stealerkeyloggermatiex

  • Matiex Main Payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2