General

  • Target

    slack.msi

  • Size

    1.5MB

  • Sample

    240725-nvpscsxakm

  • MD5

    3703f47cfa7ce06c14374f173c68daf0

  • SHA1

    11826292538317a69ffffac6fde43418af10c91c

  • SHA256

    b9dbe9649c761b0eee38419ac39dcd7e90486ee34cd0eb56adde6b2f645f2960

  • SHA512

    8126b9819d588253588b360b21a8ec0fbf12e90f7d7c7d8f01c81b730d7993409ef4c7ce044b3bdc066f745d4fd471fb2bd93fb7d8e7565f67d4e086622dce4b

  • SSDEEP

    24576:dFdxLNvYBSMvZCFlp8zBQSc0ZoCvqKwx0ECIgYmfLVYeBZr7AmAyTicXFyiYlHfe:dFtvY/W8zBQSc0ZnSKeZKumZr7AByIi+

Malware Config

Extracted

Family

latrodectus

C2

https://titnovacrion.top/live/

https://skinnyjeanso.com/live/

Targets

    • Target

      slack.msi

    • Size

      1.5MB

    • MD5

      3703f47cfa7ce06c14374f173c68daf0

    • SHA1

      11826292538317a69ffffac6fde43418af10c91c

    • SHA256

      b9dbe9649c761b0eee38419ac39dcd7e90486ee34cd0eb56adde6b2f645f2960

    • SHA512

      8126b9819d588253588b360b21a8ec0fbf12e90f7d7c7d8f01c81b730d7993409ef4c7ce044b3bdc066f745d4fd471fb2bd93fb7d8e7565f67d4e086622dce4b

    • SSDEEP

      24576:dFdxLNvYBSMvZCFlp8zBQSc0ZoCvqKwx0ECIgYmfLVYeBZr7AmAyTicXFyiYlHfe:dFtvY/W8zBQSc0ZnSKeZKumZr7AByIi+

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Detect larodectus Loader variant 2

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks