Overview

overview

10

Static

static

10

13d416399c...0N.exe

windows7-x64

1

13d416399c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13d416399ce269b4acfa8c1d9fe7a0c0N.exe

  • Size

    765KB

  • Sample

    240805-13draatfmd

  • MD5

    13d416399ce269b4acfa8c1d9fe7a0c0

  • SHA1

    4f6a5d5b2d621e6d8b8edac0f5677c83554168bb

  • SHA256

    f52bbd86e543805078868f817bd7c5e03d85768e5bc8889495f57b1a41f94b9f

  • SHA512

    6132a36137cb442e4315b1e46eff93969da2e4f5a6012df198d2d9ccd0eb43075810611489c3eed790f7bf2276da21f5234a86233bef3d47caf0f15849665dfe

  • SSDEEP

    6144:XQ3owkeG7wIZQYDGwDTWCJprCgc6ggB5Z4D8DilDIimcggBvu1RZWdBZdoKRZWEQ:+keU1efwTJ1C/6vB5Z4D8IDIf

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

C2

https://spikeliftall.com/live/

https://godfaetret.com/live/

Extracted

Family

latrodectus

Version

1.0

C2

https://spikeliftall.com/live/

https://godfaetret.com/live/
Attributes
  • group

    Ceres

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

Targets

    • Target

      13d416399ce269b4acfa8c1d9fe7a0c0N.exe

    • Size

      765KB

    • MD5

      13d416399ce269b4acfa8c1d9fe7a0c0

    • SHA1

      4f6a5d5b2d621e6d8b8edac0f5677c83554168bb

    • SHA256

      f52bbd86e543805078868f817bd7c5e03d85768e5bc8889495f57b1a41f94b9f

    • SHA512

      6132a36137cb442e4315b1e46eff93969da2e4f5a6012df198d2d9ccd0eb43075810611489c3eed790f7bf2276da21f5234a86233bef3d47caf0f15849665dfe

    • SSDEEP

      6144:XQ3owkeG7wIZQYDGwDTWCJprCgc6ggB5Z4D8DilDIimcggBvu1RZWdBZdoKRZWEQ:+keU1efwTJ1C/6vB5Z4D8IDIf

    Score
    10/10
    latrodectusloader

    • Latrodectus family

      latrodectus

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks