Matanbuchus 3.0 Malware Analysis: New Features and Ransomware Links

Matanbuchus 3.0 Malware Analysis: New Features and Ransomware Links

First seen 4 Dec 2025, 02:42 UTC •ZscalerSocprime •87% similarity •43.2

Article Content

Browse articles
ThreatCluster

Matanbuchus 3.0, a C++-based downloader offered as Malware-as-a-Service since 2020, was identified in July 2025. This version introduces Protobuf-based serialization, ChaCha20 encryption, and enhanced anti-analysis techniques. It has been linked to ransomware operations and allows threat actors to deploy additional payloads and execute shell commands.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →