General
-
Target
slack.msi
-
Size
1.5MB
-
Sample
240725-nvpscsxakm
-
MD5
3703f47cfa7ce06c14374f173c68daf0
-
SHA1
11826292538317a69ffffac6fde43418af10c91c
-
SHA256
b9dbe9649c761b0eee38419ac39dcd7e90486ee34cd0eb56adde6b2f645f2960
-
SHA512
8126b9819d588253588b360b21a8ec0fbf12e90f7d7c7d8f01c81b730d7993409ef4c7ce044b3bdc066f745d4fd471fb2bd93fb7d8e7565f67d4e086622dce4b
-
SSDEEP
24576:dFdxLNvYBSMvZCFlp8zBQSc0ZoCvqKwx0ECIgYmfLVYeBZr7AmAyTicXFyiYlHfe:dFtvY/W8zBQSc0ZnSKeZKumZr7AByIi+
Static task
static1
Behavioral task
behavioral1
Sample
slack.msi
Resource
win10v2004-20240709-en
Malware Config
Extracted
latrodectus
https://titnovacrion.top/live/
https://skinnyjeanso.com/live/
Targets
-
-
Target
slack.msi
-
Size
1.5MB
-
MD5
3703f47cfa7ce06c14374f173c68daf0
-
SHA1
11826292538317a69ffffac6fde43418af10c91c
-
SHA256
b9dbe9649c761b0eee38419ac39dcd7e90486ee34cd0eb56adde6b2f645f2960
-
SHA512
8126b9819d588253588b360b21a8ec0fbf12e90f7d7c7d8f01c81b730d7993409ef4c7ce044b3bdc066f745d4fd471fb2bd93fb7d8e7565f67d4e086622dce4b
-
SSDEEP
24576:dFdxLNvYBSMvZCFlp8zBQSc0ZoCvqKwx0ECIgYmfLVYeBZr7AmAyTicXFyiYlHfe:dFtvY/W8zBQSc0ZnSKeZKumZr7AByIi+
-
Detect larodectus Loader variant 2
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-