General

  • Target

    Document_a51_19i793302-14b09981a5569-3684u8.js

  • Size

    466KB

  • Sample

    240426-z2qh1sdb6x

  • MD5

    b5c04c9ce0a3da2e16e97632e13b5e28

  • SHA1

    00303f1b540e92a79488fd9b603c5e987cee3734

  • SHA256

    71a429fdbaa04f8eee80c05b123ba00635569801ca041fdc7c6ac41de8aa72d3

  • SHA512

    1bad3ec4b845e9592ee7d9c2f29aaf29f7a5d7c0cc84ba33333ea234a07591cc9064ef8245ff46dd1227f268cbb90891d9c53986f8eb1b4eb8d105de2d7e5939

  • SSDEEP

    6144:ertlgAdYLGKbxpEZE87yi6GtyAjI1p7ZJpO4S+gh0fNUNGndjIz5dYYku+JTiFye:ElCaExOSFky6+gO1/ne5dY/W6ItoepF

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://jarinamaers.shop/live/

https://startmast.shop/live/

Targets

    • Target

      Document_a51_19i793302-14b09981a5569-3684u8.js

    • Size

      466KB

    • MD5

      b5c04c9ce0a3da2e16e97632e13b5e28

    • SHA1

      00303f1b540e92a79488fd9b603c5e987cee3734

    • SHA256

      71a429fdbaa04f8eee80c05b123ba00635569801ca041fdc7c6ac41de8aa72d3

    • SHA512

      1bad3ec4b845e9592ee7d9c2f29aaf29f7a5d7c0cc84ba33333ea234a07591cc9064ef8245ff46dd1227f268cbb90891d9c53986f8eb1b4eb8d105de2d7e5939

    • SSDEEP

      6144:ertlgAdYLGKbxpEZE87yi6GtyAjI1p7ZJpO4S+gh0fNUNGndjIz5dYYku+JTiFye:ElCaExOSFky6+gO1/ne5dY/W6ItoepF

    Score
    10/10
    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Detect larodectus Loader variant 2

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks