Resubmissions

26-04-2024 17:24

240426-vyrvfshc61 10

26-04-2024 17:08

240426-vn1dvaha7y 8

General

  • Target

    Document_e31_92y951666-82a25718d3602-7076a5.js

  • Size

    467KB

  • Sample

    240426-vyrvfshc61

  • MD5

    57847455932cb39bde4eb69fa0b802a2

  • SHA1

    5487caab411c7205f7f67250e29730c315a4f22d

  • SHA256

    da305ed28c974ac82afc57ae365e9955b3237cde4659fb1922de4e72ed42f2b7

  • SHA512

    9815795bf9d03ec716afade344a9ca73c966bc4d0c964d88c9596f450ce7f9c911886d92d1475538d8681f6b1fa8244facbc71e1b4ec16a93a45511240d10f8c

  • SSDEEP

    6144:hMREJkNl+RKvE9pJDS905tB8mH/4nZsJVyk8GgScwHwXBrG9m6dJuKSs+1txzEHH:ai25vElrtmmfCky2n4qdYi+5z8Rvl

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://jarinamaers.shop/live/

https://startmast.shop/live/

Targets

    • Target

      Document_e31_92y951666-82a25718d3602-7076a5.js

    • Size

      467KB

    • MD5

      57847455932cb39bde4eb69fa0b802a2

    • SHA1

      5487caab411c7205f7f67250e29730c315a4f22d

    • SHA256

      da305ed28c974ac82afc57ae365e9955b3237cde4659fb1922de4e72ed42f2b7

    • SHA512

      9815795bf9d03ec716afade344a9ca73c966bc4d0c964d88c9596f450ce7f9c911886d92d1475538d8681f6b1fa8244facbc71e1b4ec16a93a45511240d10f8c

    • SSDEEP

      6144:hMREJkNl+RKvE9pJDS905tB8mH/4nZsJVyk8GgScwHwXBrG9m6dJuKSs+1txzEHH:ai25vElrtmmfCky2n4qdYi+5z8Rvl

    Score
    10/10
    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Detect larodectus Loader variant 2

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks