Matanbuchus Malware Evolves to Bypass AV Defenses by Swapping Core Components

Matanbuchus is a C++ downloader/backdoor Malware-as-a-Service that has matured into a flexible initial access and control platform frequently used to stage ransomware and other secondary payloads. Version 3.0 adds stronger obfuscation (ChaCha20-encrypted strings, MurmurHash-based API resolution), Protobuf C2 messages, and a downloader/main module architecture; recent attacks abused Microsoft Quick Assist and MSI DLL sideloading to deploy the loader, and the report includes multiple SHA256 hashes and malicious domains as IOCs.