Extracted

• • Target

    UPDATE-HSYEYDBB.html.lnk

  • Size

    1KB

  • MD5

    ae64124a57d7f5de780f85b7456d90a2

  • SHA1

    ab9a153c0da841ed0cbdd70664a48ba0959eb8a9

  • SHA256

    119f0a88b3366805f6a592742b7ced190010eb98c81f32e251bd42d968b68471

  • SHA512

    0e9ad80748d97e55708bf4939bbe0179d558d643679065c101fa52f861e4d4527cc7bd86795388892f5fd466d2ac959e11f0b89f3c84c673a86d3a62e35ae910

  Score

  10^/10

  latrodectusdiscoveryloader

  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus

  • Detect larodectus Loader variant 1

    loader

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery
  behavioral1behavioral2