General
- Target f01b02a08c1953e7db9ce61207b121c6efbe986181ba0df1ec205b5909bd856c.exe
- Size 2.3MB
- Sample240917-kcnksstdkl
- SHA256 f01b02a08c1953e7db9ce61207b121c6efbe986181ba0df1ec205b5909bd856c
- MD5 9fb83bee6ff97065c498f48fc094f848
- SHA1 860112de5e833eb5fd9abaaf6db7c881c13220f8
- SHA512 103f87414802d1edd3d932626a370cd8b3e37666d541e7550257ffa5f5e6b0ce357f11dd14f13a5ff831d02da6a596d101682adf68855c1982093da03bdf8a96
- SSDEEP 49152:YMLtHPldWW5afLAUCweyFI0ZBAFCGLcRe2xTIYLEs:j5aMUzRe2M
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f01b02a08c1953e7db9ce61207b121c6efbe986181ba0df1ec205b5909bd856c.exe
Resource
win7-20240903-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
f01b02a08c1953e7db9ce61207b121c6efbe986181ba0df1ec205b5909bd856c.exe
Resource
win10v2004-20240802-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
latrodectus
C2
-
https://pomaspoteraka.com/test/
-
https://finilamedima.com/test/
Targets
-
- Target f01b02a08c1953e7db9ce61207b121c6efbe986181ba0df1ec205b5909bd856c.exe
- Size 2.3MB
- SHA256 f01b02a08c1953e7db9ce61207b121c6efbe986181ba0df1ec205b5909bd856c
- MD5 9fb83bee6ff97065c498f48fc094f848
- SHA1 860112de5e833eb5fd9abaaf6db7c881c13220f8
- SHA512 103f87414802d1edd3d932626a370cd8b3e37666d541e7550257ffa5f5e6b0ce357f11dd14f13a5ff831d02da6a596d101682adf68855c1982093da03bdf8a96
- SSDEEP 49152:YMLtHPldWW5afLAUCweyFI0ZBAFCGLcRe2xTIYLEs:j5aMUzRe2M
- MD5 SHA1 SHA512 SSDEEP
Score10/10Detects Latrodectus
Detects Latrodectus v1.4.
Latrodectus family
Deletes itself
Executes dropped EXE
Loads dropped DLL