General
- Target Document_a19_79b555791-28h97348k5477-3219g9.js
- Size 468KB
- Sample240425-zh16eaee2v
- SHA256 156c0afc01a5e346b95ebdb60cea9b7046ad7a61199cd63d6ad0f4ae32a576ac
- MD5 3f4ddf670c98e5b0656415286e42f730
- SHA1 cf27b8f44467cd4ab250b74caa039340ecd97a94
- SHA512 e180d45f626dd7e5b91d6f46077771a9884d53e1ccddf996030c4ee57fb2c25b27a5b11ad1d616a749e878493b7c705b8a49c5616da851dfe2966b3230fafa5a
- SSDEEP 12288:rZUXLSlCpRGkwMnCzan+TMYLtA/huhhs7nkKMG4p:dUXLSIpRbwMn0VTMYLtA/huhK7TrC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Document_a19_79b555791-28h97348k5477-3219g9.js
Resource
win7-20231129-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Document_a19_79b555791-28h97348k5477-3219g9.js
Resource
win10v2004-20240412-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
latrodectus
C2
-
https://jarinamaers.shop/live/
-
https://wrankaget.site/live/
Targets
-
- Target Document_a19_79b555791-28h97348k5477-3219g9.js
- Size 468KB
- SHA256 156c0afc01a5e346b95ebdb60cea9b7046ad7a61199cd63d6ad0f4ae32a576ac
- MD5 3f4ddf670c98e5b0656415286e42f730
- SHA1 cf27b8f44467cd4ab250b74caa039340ecd97a94
- SHA512 e180d45f626dd7e5b91d6f46077771a9884d53e1ccddf996030c4ee57fb2c25b27a5b11ad1d616a749e878493b7c705b8a49c5616da851dfe2966b3230fafa5a
- SSDEEP 12288:rZUXLSlCpRGkwMnCzan+TMYLtA/huhhs7nkKMG4p:dUXLSIpRbwMn0VTMYLtA/huhK7TrC
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect larodectus Loader variant 2
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.