matiex | 044685b4ab7d6662478a46d8f991da88a69bb8b73c66ce12e48a4570c3a5050f

Analysis

max time kernel
29s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
26-04-2023 07:15

Target

044685b4ab7d6662478a46d8f991da88a69bb8b73c66ce12e48a4570c3a5050f.exe
Size

5.0MB
MD5

733e0f199b91424bb6f4d3baeaea3688
SHA1

84d6360deed9dbd97f1001fe7e4f152bebbcb32c
SHA256

044685b4ab7d6662478a46d8f991da88a69bb8b73c66ce12e48a4570c3a5050f
SHA512

3a9d4d81b0f4a7c859830162f96344b133052fc36896215891cd6a3b94b18faaba239b4b2b878a2e1e1453ed4aba97d4e05ca634fde776e2e4d6822ec18f72dc
SSDEEP

49152:XGbf5gfKJu0zf4R+oUN+edPTPR5Y0Pf/deh/1XwshSLGI/trdxblHK:8FlRm01+j0BA

Score

10^/10

Matiex
Matiex is a keylogger and infostealer first seen in July 2020.
stealer keylogger matiex

Matiex Main payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1108-54-0x0000000000200000-0x00000000007001E0-memory.dmp	family_matiex

MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Snake Keylogger
Keylogger and Infostealer first seen in November 2020.
stealer keylogger snakekeylogger

Snake Keylogger payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1108-54-0x0000000000200000-0x00000000007001E0-memory.dmp	family_snakekeylogger

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 1 IoCs

miner

Processes:

resource	yara_rule
behavioral1/memory/1108-54-0x0000000000200000-0x00000000007001E0-memory.dmp	xmrig

C:\Users\Admin\AppData\Local\Temp\044685b4ab7d6662478a46d8f991da88a69bb8b73c66ce12e48a4570c3a5050f.exe
"C:\Users\Admin\AppData\Local\Temp\044685b4ab7d6662478a46d8f991da88a69bb8b73c66ce12e48a4570c3a5050f.exe"
1⤵
PID:1108

memory/1108-54-0x0000000000200000-0x00000000007001E0-memory.dmp

Filesize
5.0MB

Download