Overview

overview

10

Static

static

10

wtfbbq (copy).exe

windows7-x64

10

wtfbbq (copy).exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wtfbbq (copy).exe

  • Size

    69KB

  • Sample

    240906-l7c8zs1brf

  • MD5

    390a3755dcdb75b85b597244edd1914a

  • SHA1

    dd70e1f0c9442d23f66b6a4224448728c6b84183

  • SHA256

    50f9e6cca7d09a8e75615634e0e497fcca48069df7f243060f6c30e91de514a0

  • SHA512

    bc0366513b6ca66bd9ebeb2739c54a97939fc35f7cd2d74bf076ff93bf5b274f9cb7efc69f9deaeb5f2e896c322071fd57817ad6b2fe830fa8ad540a26ba001e

  • SSDEEP

    768:7zrvRTYS4YxeO7ZD4SrcIuMHuOt79NguEdC+1986wzy7crreZAaf8Ic8vprE54Gf:7zx/oOfr9ltc19v6reZDf8Ic85E5Zf

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

C2

https://restoreviner.com/test/

https://peronikilinfer.com/test/

Targets

    • Target

      wtfbbq (copy).exe

    • Size

      69KB

    • MD5

      390a3755dcdb75b85b597244edd1914a

    • SHA1

      dd70e1f0c9442d23f66b6a4224448728c6b84183

    • SHA256

      50f9e6cca7d09a8e75615634e0e497fcca48069df7f243060f6c30e91de514a0

    • SHA512

      bc0366513b6ca66bd9ebeb2739c54a97939fc35f7cd2d74bf076ff93bf5b274f9cb7efc69f9deaeb5f2e896c322071fd57817ad6b2fe830fa8ad540a26ba001e

    • SSDEEP

      768:7zrvRTYS4YxeO7ZD4SrcIuMHuOt79NguEdC+1986wzy7crreZAaf8Ic8vprE54Gf:7zx/oOfr9ltc19v6reZDf8Ic85E5Zf

    Score
    10/10
    latrodectusloader

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

      latrodectus

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks