General

  • Target

    e31eaa04f39c59b97532303ae0cd41ddf8a24295bad8956d92b618b66bfecd1c.unknown

  • Size

    712KB

  • Sample

    240914-ceg7ss1dnj

  • MD5

    ac220e1c5c5071a70f99a6a8200fe955

  • SHA1

    e5cf80d3df9fa75bbdb6b09a1dbe9c40258c0d3c

  • SHA256

    e31eaa04f39c59b97532303ae0cd41ddf8a24295bad8956d92b618b66bfecd1c

  • SHA512

    92a2fb2ba46c21e60a112dbff3d828caba9b2a3f6351c9c2352c8c025c4516e9c4003b98278dccf0cebffd8dca2ba5a788523189d1f084bdb5da5868c9fd501c

  • SSDEEP

    12288:rCLwKpVwxDdbSvKk5bDrD3PltUzvFhc2zs+jnkRuov7vjkji:+BpVeDdbSvP5bfD3P+NhM+jkRuUvoji

Malware Config

Extracted

Family

latrodectus

C2

https://isomicrotich.com/test/

https://rilomenifis.com/test/

Targets

    • Target

      e31eaa04f39c59b97532303ae0cd41ddf8a24295bad8956d92b618b66bfecd1c.unknown

    • Size

      712KB

    • MD5

      ac220e1c5c5071a70f99a6a8200fe955

    • SHA1

      e5cf80d3df9fa75bbdb6b09a1dbe9c40258c0d3c

    • SHA256

      e31eaa04f39c59b97532303ae0cd41ddf8a24295bad8956d92b618b66bfecd1c

    • SHA512

      92a2fb2ba46c21e60a112dbff3d828caba9b2a3f6351c9c2352c8c025c4516e9c4003b98278dccf0cebffd8dca2ba5a788523189d1f084bdb5da5868c9fd501c

    • SSDEEP

      12288:rCLwKpVwxDdbSvKk5bDrD3PltUzvFhc2zs+jnkRuov7vjkji:+BpVeDdbSvP5bfD3P+NhM+jkRuUvoji

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks