General

  • Target

    Malware-1.zip

  • Size

    606KB

  • Sample

    240828-ps65asybnh

  • MD5

    ba661d8c471753cf418e1b8a515d6645

  • SHA1

    a812b6b35aab229dd46bb35919860a0219fded3e

  • SHA256

    7f1af59a4de54b17902c28501adebb074b586acd66cd0bc81850fe7927ab4b20

  • SHA512

    c7cdbc04065257183157eec1bdd08772a8a6b3b771e3b47112777c9fb4af5224d7eef082efdfe16c40edd785e8b5f386e981f215591e90cfb89ef3122e219094

  • SSDEEP

    12288:el2gxdWBnpjrlt1a7CUWDgyy0OIAAdGSO148nVhgke/iW/Nld1eW:el2s45Rlt1eCqNmoSl8Vh0/H/NX1eW

Malware Config

Targets

    • Target

      Run-Malware-1.bat

    • Size

      52B

    • MD5

      c3aaf7a42c7171931aa42cbb02acbe73

    • SHA1

      4561841d5e84c5f9f6c07e4fd5d477bc0edf10b4

    • SHA256

      02974799a1ed8674bd0fdd9435a5efe53236740f5de8f6d126591329b738abff

    • SHA512

      2cb6583df78893081590366f65200a4da613a5a903acd220b70b7d7f19b11ca0dbd90545a0d1f5d3519cae2333b4284d08c4e24544059038e4a5cf2457fceb51

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Blocklisted process makes network request

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks