Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240221-en -
submitted
10-05-2024 13:42
General
-
Target
3be9e476da2e99adbc49591cbc94b4d9.exe
-
Size
378KB
-
MD5
3be9e476da2e99adbc49591cbc94b4d9
-
SHA1
2155590f685d4e28c278123a1cca633e8746db78
-
SHA256
240677752d6ba09cc9f98275d694c500ed75808080fd6f8d750c16a526dc4ba7
-
SHA512
604fe5635f17fb7294436f56436a43314c9c3d29c335acbf4c9af21bfe86c958bf88e2e1863d329136b49ad612a70bca656bac9f351ca8b1332ad9283c4dcc88
-
SSDEEP
6144:Bh+z/269PFlPUafH7j2e0Ulu92uONg99U/45bXpJAJ1/x7Ly55r4UsQnW3:Bh+L269PTzuelu982PU/45qFFy55cwn
Score
10/10
Malware Config
Extracted
Family
latrodectus
C2
https://workspacin.cloud/live/
https://qaliharsit.tech/live/
Signatures
-
Latrodectus family
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3be9e476da2e99adbc49591cbc94b4d9.exe"C:\Users\Admin\AppData\Local\Temp\3be9e476da2e99adbc49591cbc94b4d9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
-
Filesize
132KB
-
Filesize
80KB