General

  • Target

    e59f0679135df217294ee07ea8cf310ede65efdaec48db6c019bf338a63039a9

  • Size

    27KB

  • Sample

    241026-p1s8eavakh

  • MD5

    a002beba660855a0827a2c2c4a4f1b9a

  • SHA1

    6d8dae00c1580985ebaf34528889500d3fbb256f

  • SHA256

    e59f0679135df217294ee07ea8cf310ede65efdaec48db6c019bf338a63039a9

  • SHA512

    88d2dd86adc4da9bc1b570814c42afd2eb52ba7bc8ba226ca419a11daef1919b7ef316017f4addb040f24c199f09f01ae6ec0022ea55889fdea7282cb269e9c8

  • SSDEEP

    768:odSsFqCa9GkeI1gVwJeujbDjHBJO0fhswZr:QFqCaSItg4bDDOkhLr

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.0

C2

https://titnovacrion.top/live/

https://skinnyjeanso.com/live/

Attributes
  • group

    Littlehw

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

Targets

    • Target

      65da6d9f781ff5fc2865b8850cfa64993b36f00151387fdce25859781c1eb711.exe

    • Size

      69KB

    • MD5

      0ad82a3b229420b4cf52959f85cba82d

    • SHA1

      f59bb505d1ed4a7492c41195f19e99f1d568ef95

    • SHA256

      65da6d9f781ff5fc2865b8850cfa64993b36f00151387fdce25859781c1eb711

    • SHA512

      f428a42ee393c813eef5a6a8dc19bef50f89ff0b7017fe204f6f85bf6305df257012ab1dd2aff977c71fe34c734d478df875d9d6229aa230c98160fc016851ad

    • SSDEEP

      768:RDrkZkx7jOxAi0IIO99dKJKbATQVuyQw4n4mjlQmLvniWiMfDeDvCPdN:RD1dj1pO9CJKoQF4n4mjltqTMKD

    Score
    10/10
    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Detect larodectus Loader variant 2

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks