General

  • Target
    Document_a19_79b555791-28h97348k5477-3219g9.js
  • Size 468KB
  • Sample240425-zh16eaee2v
  • SHA256 156c0afc01a5e346b95ebdb60cea9b7046ad7a61199cd63d6ad0f4ae32a576ac
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • latrodectus

C2
  • https://jarinamaers.shop/live/

  • https://wrankaget.site/live/

Targets

    • Target
      Document_a19_79b555791-28h97348k5477-3219g9.js
    • Size 468KB
    • SHA256 156c0afc01a5e346b95ebdb60cea9b7046ad7a61199cd63d6ad0f4ae32a576ac
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Detect larodectus Loader variant 2

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks