General

  • Target

    UpdaterTag.dll

  • Size

    75KB

  • Sample

    240828-pjjmmsxgpg

  • MD5

    cd4f5c68efd8893cc61d5156675f590e

  • SHA1

    73a09e58189ac58bccec8e83160b74d040a116af

  • SHA256

    28c6de9c144ca4ba5977e0cd74526dcc45136d2f0dc1fe6254e4a825a0b8e9d0

  • SHA512

    83dd39f0c7c658ac8b568df358916f83bf8d73b90bf307a3ebbcd698a14b9deeb5d163ea9bdffa6a0ad05b2cb3463166397629e4066d45ca63586ac5f3593106

  • SSDEEP

    1536:Czh6zOxemv7NGgkDcUiTf8Py0JxdY03L:Czh6gJGgkDekPykxL

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://rofleratom.com/test/

https://wersolinsor.com/test/

Targets

    • Target

      UpdaterTag.dll

    • Size

      75KB

    • MD5

      cd4f5c68efd8893cc61d5156675f590e

    • SHA1

      73a09e58189ac58bccec8e83160b74d040a116af

    • SHA256

      28c6de9c144ca4ba5977e0cd74526dcc45136d2f0dc1fe6254e4a825a0b8e9d0

    • SHA512

      83dd39f0c7c658ac8b568df358916f83bf8d73b90bf307a3ebbcd698a14b9deeb5d163ea9bdffa6a0ad05b2cb3463166397629e4066d45ca63586ac5f3593106

    • SSDEEP

      1536:Czh6zOxemv7NGgkDcUiTf8Py0JxdY03L:Czh6gJGgkDekPykxL

    Score
    10/10
    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks