General
- Target Matcha.exe
- Size 102.6MB
- Sample260812-1chbsas1es
- SHA256 672203a7a49eb9d531116827a1a422503ef69cf01ade5a4b47410fb746d272cf
- MD5 499e1ec2edf2d4e986cc37834530314c
- SHA1 e9dc238a5ec3f7cf91f66ea6d4ff150650a7b9fa
- SHA512 cd29e856c83276090f17c8ff8b1d328b6319c323023c60105da5e548635c5a8c0420eea35266ca3a30a68b894989797f744aacd5aa7f074ca0c82ee0a68a3943
- SSDEEP 3145728:IEQlLgaR55oR/E0/kd0xKFxHWvc3F9Vx9XK+8ATT/JRKGVU:In3R0FEP9h7Vx8+pTBRnU
- TLSH T1B63833C1EF9226EAD4B40031B511AE26E3D132D61F738A9F0FE452412E972C4EB759F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
Matcha.exe
Resource
win10v2004-20260513-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
Matcha.exe
Resource
win11ltsc2024-20260709-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target Matcha.exe
- Size 102.6MB
- SHA256 672203a7a49eb9d531116827a1a422503ef69cf01ade5a4b47410fb746d272cf
- MD5 499e1ec2edf2d4e986cc37834530314c
- SHA1 e9dc238a5ec3f7cf91f66ea6d4ff150650a7b9fa
- SHA512 cd29e856c83276090f17c8ff8b1d328b6319c323023c60105da5e548635c5a8c0420eea35266ca3a30a68b894989797f744aacd5aa7f074ca0c82ee0a68a3943
- SSDEEP 3145728:IEQlLgaR55oR/E0/kd0xKFxHWvc3F9Vx9XK+8ATT/JRKGVU:In3R0FEP9h7Vx8+pTBRnU
- TLSH T1B63833C1EF9226EAD4B40031B511AE26E3D132D61F738A9F0FE452412E972C4EB759F9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.