Overview

overview

10

Static

static

58EE4BED5C...48.msi

windows7_x64

10

58EE4BED5C...48.msi

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    58EE4BED5C5B0B0DCAD9548F0D8B82B52C0090ADC3C50DEC6A2088EF243C1148.zip
  • Size 191KB
  • Sample220616-yp9wfsbdh7
  • SHA256 07f558d48bbb07e42dd21095087c126b91ec0426073fc78f3ae31a6540d3edae
  • MD5 SHA1 SHA512
Score
10/10
matanbuchusloader

Malware Config

Targets

    • Target
      58EE4BED5C5B0B0DCAD9548F0D8B82B52C0090ADC3C50DEC6A2088EF243C1148.msi
    • Size 224KB
    • SHA256 58ee4bed5c5b0b0dcad9548f0d8b82b52c0090adc3c50dec6a2088ef243c1148
    • MD5 SHA1 SHA512
    Score
    10/10
    matanbuchusloader

    • Matanbuchus

      A loader sold as MaaS first seen in February 2021.

      loadermatanbuchus

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks