General
-
Target
lib.msi
-
Size
1.5MB
-
Sample
240401-2ksyxshf68
-
MD5
e1692df23c8753b5744c77570aca2f2e
-
SHA1
71a71557601602427c80021acb978cccb78e1536
-
SHA256
0f0757d1baa3bd0341d282bb0afcdbdb522676db05814a3c3051c08829151b52
-
SHA512
4ce5eba6204ff771fa65e102529580c67076aa7906d38f240c3caf49e4ba35633384015db2ac63c4b29f340152bc6720fcec4d7e42dfdab8c21c4c6659ee5504
-
SSDEEP
24576:SwRxLNvYLSMvZCFlp8zBQSc0ZoCvqKwx0ECIgYmfLVYeBZr7AuSqTicJ2I0x:SwxvYpW8zBQSc0ZnSKeZKumZr7AjqAI0
Static task
static1
Behavioral task
behavioral1
Sample
lib.msi
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
lib.msi
Resource
win10v2004-20240226-en
Malware Config
Extracted
latrodectus
https://titnovacrion.top/live/
https://skinnyjeanso.com/live/
Targets
-
-
Target
lib.msi
-
Size
1.5MB
-
MD5
e1692df23c8753b5744c77570aca2f2e
-
SHA1
71a71557601602427c80021acb978cccb78e1536
-
SHA256
0f0757d1baa3bd0341d282bb0afcdbdb522676db05814a3c3051c08829151b52
-
SHA512
4ce5eba6204ff771fa65e102529580c67076aa7906d38f240c3caf49e4ba35633384015db2ac63c4b29f340152bc6720fcec4d7e42dfdab8c21c4c6659ee5504
-
SSDEEP
24576:SwRxLNvYLSMvZCFlp8zBQSc0ZoCvqKwx0ECIgYmfLVYeBZr7AuSqTicJ2I0x:SwxvYpW8zBQSc0ZnSKeZKumZr7AjqAI0
Score10/10-
Detect larodectus Loader variant 2
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-