General
- Target Matcha.exe
- Size 24.0MB
- Sample260715-ybcc2ads6l
- SHA256 a5197fe35b7483373128f93da00c8203adbca9935716e039ca0da61ce714b70f
- MD5 ce7868fb0bd2acb0bdd3eb8a832a58f2
- SHA1 38b24d8a6e4cef3d7405b05a66c851dcf605f36a
- SHA512 090caa00bf1ac7b3757421fa6ff3d7c990ccee4d42db505e13646dfa3edc8f590b196321eb39aaeee51ae45eba75eb38a5c92b7e2800e918717a470a3aff1803
- SSDEEP 786432:CxkqEwAqWnW+e5RSOjTNGCgXpNK4t9Mm0da4G:gkqLb2W+eHSK4hZcVdBG
- TLSH T15347330290D84EAAE666A13DC6D08657FEB1B4A04778C9DFCD74D1871B231E2793EF48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Matcha.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Matcha.pyc
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Matcha.exe
- Size 24.0MB
- SHA256 a5197fe35b7483373128f93da00c8203adbca9935716e039ca0da61ce714b70f
- MD5 ce7868fb0bd2acb0bdd3eb8a832a58f2
- SHA1 38b24d8a6e4cef3d7405b05a66c851dcf605f36a
- SHA512 090caa00bf1ac7b3757421fa6ff3d7c990ccee4d42db505e13646dfa3edc8f590b196321eb39aaeee51ae45eba75eb38a5c92b7e2800e918717a470a3aff1803
- SSDEEP 786432:CxkqEwAqWnW+e5RSOjTNGCgXpNK4t9Mm0da4G:gkqLb2W+eHSK4hZcVdBG
- TLSH T15347330290D84EAAE666A13DC6D08657FEB1B4A04778C9DFCD74D1871B231E2793EF48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target Matcha.pyc
- Size 240KB
- SHA256 97feaf93b8a9b70b871b29911d26cd3c41f2e8e4c849737a9c24568a4c27fbb3
- MD5 3ba0af3e5f864c3abcce76e8d5d8b701
- SHA1 5caab50556c897dec706f1936783240de8871503
- SHA512 028d6d163a92b63fd5b0ce4d61f74cecdfdd80e6cae42aac06c14ccfa3818b537d7023f81ecfa38b87350c607db8a2ed913d8352baa46f3b8cc8f45568094c36
- SSDEEP 6144:wQi6upW4s+u1ul6YRBE1Bh+4lllilllvldlum:RgR9wQ4lllilllvldlum
- TLSH T16734C4827BA3C477F861B1BA4026374FF3359AB17741CB1361BB80793E8A2A99D514CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10