General

  • Target

    latrodectus_Object.zip

  • Size

    635KB

  • Sample

    241114-ry1wks1brm

  • MD5

    40e607240bf3c7f545784d4bfea9036a

  • SHA1

    5b8cc6b22cc9e5f8384736497a02862d31ff04e9

  • SHA256

    25c47009be94c92f2c0e1c4c2d8a85df40d9e5efcadf20b55d330e786310d75d

  • SHA512

    5f13a45a2d46b857198800fdda4ea68fae654030c8155b9d973529f45a2067ce4042a1d3a0b9de8f28a4f81485da378ad78f2dd4f46ddd2f93788cb5de0d44de

  • SSDEEP

    12288:KyDlMGpxC2HwQuTZy9Uc/8c2DdGSLczsn2Zhdj9Tv9swiwvIy4/2nZjhBph8xp7R:KyZL0745/8cGlktJv9sepJhBpixJFPgK

Score
10/10

Malware Config

Targets

    • Target

      run.bat

    • Size

      52B

    • MD5

      e5aeedc3eaec3b7f095cc076da3c285f

    • SHA1

      85b1d204f6505e8c4ccaaf62c47566590f7eca69

    • SHA256

      a1f2597f6804c5f40401ed2ec981022a601fe8a1e4eca70b3c9a84a68012ef78

    • SHA512

      8c549ea66298ba1dde7882d32a0dbe70111a8bd3afd59dc06e1dcf0a0f9de396ac25c1e93fd1470ec68e46f03c10a403d64651e793dbc0d398b20d94b7b9f0ec

    Score
    10/10
    • Detects Latrodectus

      Detects Latrodectus v1.4 Payload.

    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Loads dropped DLL

    • Target

      sample.dll

    • Size

      1.6MB

    • MD5

      d5c83fb50dfea0d0e33584ac228b4036

    • SHA1

      f0d42f81e73f4b49985c3a2a547987771cb3b6a9

    • SHA256

      69a1709290bf91fd4a5c81eb78b18e22b312a3517db4651659c4c8a98782b769

    • SHA512

      9b9b8953450697afe85bf7e80a4a624428eec5433e65128e19364886950ba6ce16a74e787cba16739388ba1c2135354af9500b37bac98951a300ec19ba997765

    • SSDEEP

      24576:OZUojo622mgFSgT95BG1Dod9eIJb6/Y9rQcZ9pIkh4bdY59ed2ABHSm0j:OiW22vFR5s1HIVCY9kQ9SkmbyedjBp0j

    Score
    10/10
    • Detects Latrodectus

      Detects Latrodectus v1.4 Payload.

    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

MITRE ATT&CK Enterprise v15

Tasks