Extracted

• • Target

    819096acf63b5d611a3009c559049e27_JaffaCakes118

  • Size

    479KB

  • MD5

    819096acf63b5d611a3009c559049e27

  • SHA1

    11aab366797c1d758b288002fcf79e38d7401dcb

  • SHA256

    597c71c6a2012cf5ccd4a5e8b97be637add1d690283331c709f4c8fee94dd280

  • SHA512

    5e2d50c87791d4a05144c2bcdd91f28b2ae464dbf6f23d3d1c04c255312b1b9c685619023c202d96cf7c0e8d432041ab365d4337b45dc6568a0a54dd1ab93b86

  • SSDEEP

    6144:QZAFjCBUSf/f45NBQvOdS7965mgZBr7jbFSfMfqhWu4iW4ElEjyWBYa:IEOBWUvO4p6Q+J7vF+MQWT181

  Score

  10^/10

  discoverymatiexcollectioncredential_accesskeyloggerstealer

  • Matiex

    Matiex is a keylogger and infostealer first seen in July 2020.

    stealerkeyloggermatiex

  • Matiex Main payload

  • Matiex family

    matiex

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2