Extracted

• • Target

    853dbf787fe03b50e3fa1c725412485a_JaffaCakes118

  • Size

    434KB

  • MD5

    853dbf787fe03b50e3fa1c725412485a

  • SHA1

    770e542ccbdc385a39d41030723e10e5e1cd2795

  • SHA256

    45c9f027cceb7c97e38df424e4f42fea206981b62ab707c214a24a41bf7fd52d

  • SHA512

    68b5956d6a0175ac6192a784f0f31d659b209df48cdf6865f638c15b5f0433ee7ec4e0f3c283d99969c65181f7084e89cdc950ef04f2ae721f1cf5867628b81a

  • SSDEEP

    3072:aE/Y90NTkvPPyWoujFxxyxdxgO80CEZIpXv15ccov2n+MRWj18N49F:89igvCWoujbxWdxgdptecov2n+sWj1Cy

  Score

  10^/10

  matiexcollectionkeyloggerspywarestealer

  • Matiex

    Matiex is a keylogger and infostealer first seen in July 2020.

    stealerkeyloggermatiex

  • Matiex Main payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2