Extracted

• • Target

    Form_W-9_Ver-i40_53b043910-86g91352u7972-6495q3.js

  • Size

    467KB

  • MD5

    6682dc1281579bd8789a8d2c09ca4251

  • SHA1

    67bb21c9665fc12d8dc6ef2ac775c3f6274bd0ed

  • SHA256

    937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913

  • SHA512

    629219ec7dd6d1ca529daabeffe7b4430467d089054876c203d7be9979c32bb6d01901d018d88a81699ae18ba1be1421ec5fcbea6610f3e96953b1ab07b048bb

  • SSDEEP

    6144:I/sTY54eD0MDV96cPh7siYttNfIR3zKEyX90q+jTEkyZxUwwkykmQmByuPatD/ey:8uu96FjIR3MN24Uk1

  Score

  10^/10

  executionlatrodectusloaderpersistence

  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus

  • Detect larodectus Loader variant 2

    loader

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2