General

  • Target

    UpdaterTag.dll

  • Size

    75KB

  • Sample

    240926-dyplnavdln

  • MD5

    08071c1626889186043493cd17007d1b

  • SHA1

    845f7494136882095f391075b0b0113d86380792

  • SHA256

    eaf0ece0a09bb590077f6e5a7115c38b11d7a8e93e5b2a7608724cd66dc327b5

  • SHA512

    80049aff6af3c6ef4f77017141381c01d15d5e00dcb62d0c3d10251798cbe73fb119b6996d7bddee526a75b06615d58281731581023e5ac42a982e1b9b5d54e4

  • SSDEEP

    1536:KzhEJO+9X+cc8TAGRO73fhRPf82jhuplU:KzhEt9HTAGyk2Yp

Score
10/10

Malware Config

Targets

    • Target

      UpdaterTag.dll

    • Size

      75KB

    • MD5

      08071c1626889186043493cd17007d1b

    • SHA1

      845f7494136882095f391075b0b0113d86380792

    • SHA256

      eaf0ece0a09bb590077f6e5a7115c38b11d7a8e93e5b2a7608724cd66dc327b5

    • SHA512

      80049aff6af3c6ef4f77017141381c01d15d5e00dcb62d0c3d10251798cbe73fb119b6996d7bddee526a75b06615d58281731581023e5ac42a982e1b9b5d54e4

    • SSDEEP

      1536:KzhEJO+9X+cc8TAGRO73fhRPf82jhuplU:KzhEt9HTAGyk2Yp

    Score
    10/10
    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Blocklisted process makes network request

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks