General
-
Target
14112024_0101_lavi.msi
-
Size
2.0MB
-
Sample
241114-bdn4aavrhm
-
MD5
c65899e2519f4ad21fb4b97f0a113362
-
SHA1
a1f854c29a69c19949499fca5e24b02b97be46fd
-
SHA256
025abbec1724b9180b369fe116da9d90ae47a4996f6a4e28e8a947bac1e0c741
-
SHA512
eca93cb24187735ec54d4b4e99675f87f1957e255f59c5432498bbc2c47c77b6ccfdf48861a2f78eb377307ce8f6e6458eaf4b766b96e6c2faea1fb87e3dcbb4
-
SSDEEP
49152:/c53YhW8zBQSc0ZnSKBZKumZr7Aej3YOXT7wYyr8lCV:QYY0Zn3K/Ai33XXZ0
Static task
static1
Behavioral task
behavioral1
Sample
14112024_0101_lavi.msi
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14112024_0101_lavi.msi
Resource
win10v2004-20241007-en
Malware Config
Extracted
latrodectus
https://rolefenik.com/test/
https://ergiholim.com/test/
Targets
-
-
Target
14112024_0101_lavi.msi
-
Size
2.0MB
-
MD5
c65899e2519f4ad21fb4b97f0a113362
-
SHA1
a1f854c29a69c19949499fca5e24b02b97be46fd
-
SHA256
025abbec1724b9180b369fe116da9d90ae47a4996f6a4e28e8a947bac1e0c741
-
SHA512
eca93cb24187735ec54d4b4e99675f87f1957e255f59c5432498bbc2c47c77b6ccfdf48861a2f78eb377307ce8f6e6458eaf4b766b96e6c2faea1fb87e3dcbb4
-
SSDEEP
49152:/c53YhW8zBQSc0ZnSKBZKumZr7Aej3YOXT7wYyr8lCV:QYY0Zn3K/Ai33XXZ0
-
Detects Latrodectus
Detects Latrodectus v1.4.
-
Latrodectus family
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1