Overview

overview

10

Static

static

1

2374fd5d04...99.msi

windows7-x64

10

2374fd5d04...99.msi

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2374fd5d049c1b8f1b7fd3115f035e9f154b1f04e1cc276507930811fe349399.zip

  • Size

    673KB

  • Sample

    240402-q7se5acc5y

  • MD5

    2fd3f432f9ea7b0f2e6d354263a71ed2

  • SHA1

    2ff10219746c91c2c87f6f1eb474df09f2a8fe9c

  • SHA256

    1193f9b726029f17e95640b2193a48ff1142b3b2531b736015009ff1a0038aa7

  • SHA512

    6cca5f42822e4f2667e97f2b8f79b50555bf9ad5fd47e54c2e22773ce154f255ba776bc7948babe8204ecefaa704a45fdf60cbd173e0e707a9b83d93cb105905

  • SSDEEP

    12288:gni5QSPrbWAdPnjiVotEZe00SomDCtJyjpAwU5r+F8BLDjTscmkhJ4KoF/SzH:pjbNdrDEZe0LzCtSr8jTsG3huW

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

C2

https://arsimonopa.com/live/

https://lemonimonakio.com/live/

Targets

    • Target

      2374fd5d049c1b8f1b7fd3115f035e9f154b1f04e1cc276507930811fe349399.msi

    • Size

      2.0MB

    • MD5

      b13b0cf148e3a25cbad37604956df69d

    • SHA1

      b7136c309dd803a1303c6d93c1aafebb00e1b6bd

    • SHA256

      2374fd5d049c1b8f1b7fd3115f035e9f154b1f04e1cc276507930811fe349399

    • SHA512

      af79999ff2b12d6fd32fd0fdaf0a69b23f5ad196035d9a521ff959960c29a9ee7a2dd781f8e5cd1b82677554afd370d97bb17d4434e177cc4ef215df08fefd49

    • SSDEEP

      24576:fBlIwwkElBoKQs8pRUm6rPtWYW/x91J8/k:fBmQEjoY8Xbm

    Score
    10/10
    latrodectusloader

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Detect larodectus Loader variant 1

      loader

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks