Extracted

• • Target

    67f4f989a12849763167b2366c11564c_JaffaCakes118

  • Size

    434KB

  • MD5

    67f4f989a12849763167b2366c11564c

  • SHA1

    9687d2c6d575861bf2cc74ead1099888dfeef111

  • SHA256

    fe7db020dc9a216c417340950ed826de77d3fe968ab9b16f5ddb98e08dcb0eee

  • SHA512

    bda0bc9280dda6648cdf6a1e0bce40458749811e330fe3fe4b83c8c42d8c7a8aa4464dd763263a504db5554a3d9275c7d2afda3adf50bd4a621108953c75484f

  • SSDEEP

    6144:ggPgejLAWGU7NpRJkdlvuGsS5b3PsOVtEB:gXkLAW5PRJ+lHxP3VtK

  Score

  10^/10

  matiexkeyloggerstealercollectionspyware

  • Matiex

    Matiex is a keylogger and infostealer first seen in July 2020.

    stealerkeyloggermatiex

  • Matiex Main payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2