Overview

overview

10

Static

static

3c1a5b1eeb...fc.msi

windows7-x64

10

3c1a5b1eeb...fc.msi

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    3c1a5b1eebdba993081e6fcf3ea415fc
  • Size 224KB
  • Sample220726-jcy6vsfbdn
  • SHA256 92e5e552f3e30774359f76fd596cfe2bc62bfafcd46868756053c5e75254d597
  • MD5 SHA1 SHA512
Score
10/10
matanbuchusloader

Malware Config

Targets

    • Target
      3c1a5b1eebdba993081e6fcf3ea415fc
    • Size 224KB
    • SHA256 92e5e552f3e30774359f76fd596cfe2bc62bfafcd46868756053c5e75254d597
    • MD5 SHA1 SHA512
    Score
    10/10
    matanbuchusloader

    • Matanbuchus

      A loader sold as MaaS first seen in February 2021.

      loadermatanbuchus

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks