General
- Target 989f811ac3c4ba5413fef99154ba60d930835d17832d6c26e3b66d9d45e01126.zip
- Size 8.9MB
- Sample241009-cb7chsvhpg
- SHA256 f3cd7dc8576b38bc9ae90ad6abe6971ef515805a87dd342b22d693bfb3ffa8bf
- MD5 45424e29abb156fae5b94a250d34c4ae
- SHA1 9c0175f472b17c5b16533a8ef15e46335b709c73
- SHA512 fd68aae685f84fa3e51099ed6a488b87fdff1abb9f0e64620c342b844d221deaf9456fd1d0b5c8ec0bb25a0e9b4b8e989928e64abc41e22a6200fd3d36462491
- SSDEEP 196608:otLJYLuC0uBxqPrkgD0fMNrWvUYdULF+gZBtOH/pKyWSz3ivAy:m+LuC0LrPIfirWMLLF+utiKyWyhy
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
989f811ac3c4ba5413fef99154ba60d930835d17832d6c26e3b66d9d45e01126.exe
Resource
win7-20240708-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
989f811ac3c4ba5413fef99154ba60d930835d17832d6c26e3b66d9d45e01126.exe
Resource
win10v2004-20241007-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
latrodectus
C2
-
https://restoreviner.com/test/
-
https://peronikilinfer.com/test/
Targets
-
- Target 989f811ac3c4ba5413fef99154ba60d930835d17832d6c26e3b66d9d45e01126
- Size 11.0MB
- SHA256 989f811ac3c4ba5413fef99154ba60d930835d17832d6c26e3b66d9d45e01126
- MD5 262d733731abd4b67a97b682bfc9861f
- SHA1 254734707cfd4f34388e0b907240c26732434c99
- SHA512 ec49736c73700a2eeeac0c048e1999a081ea2537564ef2e57a04d4a9bbe9016a511955ca78806c6fa18649b4abed790c35c00ed3db7296a2145590fe201c51bc
- SSDEEP 196608:R/6pQnU/4/OVGeiU1W0vAd607M+9iX6HL7iir9ZyYJ43I/hrI:R/gQqrVGo4Ep6iXo7GYJftI
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects Latrodectus
Detects Latrodectus v1.4.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL