General

  • Target

    Document_a19_79b555791-28h97348k5477-3219g9.js

  • Size

    468KB

  • Sample

    240425-zh16eaee2v

  • MD5

    3f4ddf670c98e5b0656415286e42f730

  • SHA1

    cf27b8f44467cd4ab250b74caa039340ecd97a94

  • SHA256

    156c0afc01a5e346b95ebdb60cea9b7046ad7a61199cd63d6ad0f4ae32a576ac

  • SHA512

    e180d45f626dd7e5b91d6f46077771a9884d53e1ccddf996030c4ee57fb2c25b27a5b11ad1d616a749e878493b7c705b8a49c5616da851dfe2966b3230fafa5a

  • SSDEEP

    12288:rZUXLSlCpRGkwMnCzan+TMYLtA/huhhs7nkKMG4p:dUXLSIpRbwMn0VTMYLtA/huhK7TrC

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://jarinamaers.shop/live/

https://wrankaget.site/live/

Targets

    • Target

      Document_a19_79b555791-28h97348k5477-3219g9.js

    • Size

      468KB

    • MD5

      3f4ddf670c98e5b0656415286e42f730

    • SHA1

      cf27b8f44467cd4ab250b74caa039340ecd97a94

    • SHA256

      156c0afc01a5e346b95ebdb60cea9b7046ad7a61199cd63d6ad0f4ae32a576ac

    • SHA512

      e180d45f626dd7e5b91d6f46077771a9884d53e1ccddf996030c4ee57fb2c25b27a5b11ad1d616a749e878493b7c705b8a49c5616da851dfe2966b3230fafa5a

    • SSDEEP

      12288:rZUXLSlCpRGkwMnCzan+TMYLtA/huhhs7nkKMG4p:dUXLSIpRbwMn0VTMYLtA/huhK7TrC

    Score
    10/10
    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Detect larodectus Loader variant 2

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks