Extracted

• • Target

    API.msi

  • Size

    1.8MB

  • MD5

    b1c0657b678a8e3f320476ef4ba6dfd2

  • SHA1

    883a69c2aa664a783b416ec44506aad9d03832d5

  • SHA256

    24746dfb4ac476772d7a1e936b714b9f0df30612395e4d8e7f31a2c43983bc55

  • SHA512

    89059e8f6ae5039cdac24e64cd3b3805691121963f395faee41fb1d8799134ae8ae5ba5f90fd29aec9e6625a4041fd7c2f70185167bf3bb85d4ddad8ab8a383a

  • SSDEEP

    49152:fsE3YhW8zBQSc0ZnSKBZKumZr7AOMLQaaVLAY+Dpwe:1YY0Zn3K/ATLCpNe

  Score

  10^/10

  latrodectusdiscoveryloaderpersistenceprivilege_escalation

  • Detects Latrodectus

    Detects Latrodectus v1.4.

  • Latrodectus family

    latrodectus

  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus

  • Blocklisted process makes network request

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2