Overview

overview

10

Static

static

1

CN.msi

windows7-x64

10

CN.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CN.msi

  • Size

    1.6MB

  • Sample

    240904-snvggsthlf

  • MD5

    329259260ebe046b0e80bec91f632ba0

  • SHA1

    db1184c14af32cf859d7f089d1dacc685257cc11

  • SHA256

    334c3f529b1c580ea83e2ea1e85b7a937dcceb3dd3b2a533afb936f53100c222

  • SHA512

    cfa0235623ec962266dbe9bcba5eac4535eff365aa784e6cf4d2a877aa6fedcc0801e5ba751b35ad176997337b72e4141f42ee07faf1017abcfda42b3228b2a4

  • SSDEEP

    49152:L/c3YuW8zBQSc0ZnSKYZKumZr7AVXP4XnEPvw:CY90ZniK/AVXP

Score
10/10
latrodectusdiscoveryloaderpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      CN.msi

    • Size

      1.6MB

    • MD5

      329259260ebe046b0e80bec91f632ba0

    • SHA1

      db1184c14af32cf859d7f089d1dacc685257cc11

    • SHA256

      334c3f529b1c580ea83e2ea1e85b7a937dcceb3dd3b2a533afb936f53100c222

    • SHA512

      cfa0235623ec962266dbe9bcba5eac4535eff365aa784e6cf4d2a877aa6fedcc0801e5ba751b35ad176997337b72e4141f42ee07faf1017abcfda42b3228b2a4

    • SSDEEP

      49152:L/c3YuW8zBQSc0ZnSKYZKumZr7AVXP4XnEPvw:CY90ZniK/AVXP

    Score
    10/10
    latrodectusdiscoveryloaderpersistenceprivilege_escalation

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks