Extracted

• • Target

    14112024_0101_lavi.msi

  • Size

    2.0MB

  • MD5

    c65899e2519f4ad21fb4b97f0a113362

  • SHA1

    a1f854c29a69c19949499fca5e24b02b97be46fd

  • SHA256

    025abbec1724b9180b369fe116da9d90ae47a4996f6a4e28e8a947bac1e0c741

  • SHA512

    eca93cb24187735ec54d4b4e99675f87f1957e255f59c5432498bbc2c47c77b6ccfdf48861a2f78eb377307ce8f6e6458eaf4b766b96e6c2faea1fb87e3dcbb4

  • SSDEEP

    49152:/c53YhW8zBQSc0ZnSKBZKumZr7Aej3YOXT7wYyr8lCV:QYY0Zn3K/Ai33XXZ0

  Score

  10^/10

  latrodectusdiscoveryloaderpersistenceprivilege_escalation

  • Detects Latrodectus

    Detects Latrodectus v1.4.

  • Latrodectus family

    latrodectus

  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus

  • Blocklisted process makes network request

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2