Overview

overview

10

Static

static

10

mal_dump.dll

windows10-1703-x64

10

mal_dump.dll

windows7-x64

10

mal_dump.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mal_dump.bin

  • Size

    72KB

  • Sample

    240918-2hv1hawgpf

  • MD5

    827bf3ffc5646444ee770de24008a5fc

  • SHA1

    e66f50f2c9792b8ecc9317f74d51c98380d7df36

  • SHA256

    ba9b2c8a37a1a1d45713d26578a8ab0abc5b439581faa3d770bcfe441c12b8f0

  • SHA512

    57b0e97e15833b10e11a521dedeec5dfaa3d5dee12d6455e82ba453e7b494a01ab8ad5cad7ca50f4c1e422c0e14868b75cadf588f32b556362c4f90008309a3a

  • SSDEEP

    1536:Izhn3OA/88fZVS18GpH50f88d0cTJ5Kga:Izhnt/vVS18zk8dDba

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

C2

https://isomicrotich.com/test/

https://rilomenifis.com/test/

Targets

    • Target

      mal_dump.bin

    • Size

      72KB

    • MD5

      827bf3ffc5646444ee770de24008a5fc

    • SHA1

      e66f50f2c9792b8ecc9317f74d51c98380d7df36

    • SHA256

      ba9b2c8a37a1a1d45713d26578a8ab0abc5b439581faa3d770bcfe441c12b8f0

    • SHA512

      57b0e97e15833b10e11a521dedeec5dfaa3d5dee12d6455e82ba453e7b494a01ab8ad5cad7ca50f4c1e422c0e14868b75cadf588f32b556362c4f90008309a3a

    • SSDEEP

      1536:Izhn3OA/88fZVS18GpH50f88d0cTJ5Kga:Izhnt/vVS18zk8dDba

    Score
    10/10
    latrodectusloader

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

      latrodectus

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks