matanbuchus | 0f41536cd9982a5c1d6993fac8cd5eb4e7f8304627f2019a17e1aa283ac3f47c

Resubmissions

18/08/2025, 19:21

250818-x2vfvsxjx910

07/08/2025, 14:56

250807-sa6ycsxl1810

Sharing

Copy URL Twitter E-mail

General

Target
0f41536cd9982a5c1d6993fac8cd5eb4e7f8304627f2019a17e1aa283ac3f47c
Size 579KB
Sample250818-x2vfvsxjx9
SHA256 0f41536cd9982a5c1d6993fac8cd5eb4e7f8304627f2019a17e1aa283ac3f47c
MD5 a86c153cfb39fc0bbaf573acaef27f93
SHA1 1ff08496b459903acaf475ad39d0387e44b4d721
SHA512 1ba9e4413ffd7a27fe55d289e12bbac6a7388ef2c97065cc6503f6d66f8ec06a72109e0b7d9137219013ef3ce0f4d09aaf38f28bf1d355f5dd3ec01dc012d2de
SSDEEP 12288:1qqEj9B8vyNqf208h7ch7c8JtaEnNoWo:Ebn7o7rNoWo
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

matanbuchus discovery

Malware Config

Extracted

Family

matanbuchus

https://emorista.org/libraries3.aspx

Targets

- Target
  0f41536cd9982a5c1d6993fac8cd5eb4e7f8304627f2019a17e1aa283ac3f47c
- Size 579KB
- SHA256 0f41536cd9982a5c1d6993fac8cd5eb4e7f8304627f2019a17e1aa283ac3f47c
- MD5 a86c153cfb39fc0bbaf573acaef27f93
- SHA1 1ff08496b459903acaf475ad39d0387e44b4d721
- SHA512 1ba9e4413ffd7a27fe55d289e12bbac6a7388ef2c97065cc6503f6d66f8ec06a72109e0b7d9137219013ef3ce0f4d09aaf38f28bf1d355f5dd3ec01dc012d2de
- SSDEEP 12288:1qqEj9B8vyNqf208h7ch7c8JtaEnNoWo:Ebn7o7rNoWo
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery
- Downloads MZ/PE file
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

Downloads MZ/PE file

Executes dropped EXE

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2