Overview

overview

10

Static

static

10

6de82b0e0a...90.dll

windows7_x64

6de82b0e0a...90.dll

windows10-2004_x64

10

Resubmissions

20-06-2022 14:50

220620-r7jzesgca2 10

20-06-2022 14:37

220620-rzb9lseabn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6de82b0e0aa7a3a281c0db71109ddbb181d3421446f3c8e232da262857cc2990.bin

  • Size

    468KB

  • Sample

    220620-r7jzesgca2

  • MD5

    fd8d9aabdb27389eb19532050f6f5667

  • SHA1

    ba296f16f1699984331b729cce424fb18233bea4

  • SHA256

    6de82b0e0aa7a3a281c0db71109ddbb181d3421446f3c8e232da262857cc2990

  • SHA512

    317e831df1544e3c9f0a0af25574aceaa34000594df52a22c49956f6cd07c46249c0a68e1c922f9ab16811eb7b1ee67660125f1497f15c709ccc0a8cfc6b29ba

Score
10/10
matanbuchusloadersuricata

Malware Config

Targets

    • Target

      6de82b0e0aa7a3a281c0db71109ddbb181d3421446f3c8e232da262857cc2990.bin

    • Size

      468KB

    • MD5

      fd8d9aabdb27389eb19532050f6f5667

    • SHA1

      ba296f16f1699984331b729cce424fb18233bea4

    • SHA256

      6de82b0e0aa7a3a281c0db71109ddbb181d3421446f3c8e232da262857cc2990

    • SHA512

      317e831df1544e3c9f0a0af25574aceaa34000594df52a22c49956f6cd07c46249c0a68e1c922f9ab16811eb7b1ee67660125f1497f15c709ccc0a8cfc6b29ba

    Score
    10/10
    matanbuchusloadersuricata

    • Matanbuchus

      A loader sold as MaaS first seen in February 2021.

      loadermatanbuchus

    • suricata: ET MALWARE Matanbuchus Loader CnC M1

      suricata: ET MALWARE Matanbuchus Loader CnC M1

      suricata

    • suricata: ET MALWARE Matanbuchus Loader CnC M3

      suricata: ET MALWARE Matanbuchus Loader CnC M3

      suricata

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks