General

  • Target

    d1e47440f39aa38030291c418b411fdb89e30cf8b909069da2c3b70fb02c8051N.exe

  • Size

    2.5MB

  • Sample

    241222-hq83jsykcx

  • MD5

    187b9b21317fc31a90a5b804102e15b0

  • SHA1

    c99f09128e405dd75bf218e80c048c613ef90359

  • SHA256

    d1e47440f39aa38030291c418b411fdb89e30cf8b909069da2c3b70fb02c8051

  • SHA512

    d75fe63e440260c701fecb500e2f8f62e97207f31610d6a93b28fa0f33a0df9d80c665c1e86692933862cb1ecc4979f48aa643b0ad95aa484d6822a24bd44434

  • SSDEEP

    49152:q2daHSl4E1Kn2w719v6ODWb2h7dk2YCRq7fjN8QC7a0N9esKsJIV4:P1K2Vio2h7G2YCRq7h5C7aHs7o

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://proliforetka.com/test/

https://dogirafer.com/test/

Targets

    • Target

      d1e47440f39aa38030291c418b411fdb89e30cf8b909069da2c3b70fb02c8051N.exe

    • Size

      2.5MB

    • MD5

      187b9b21317fc31a90a5b804102e15b0

    • SHA1

      c99f09128e405dd75bf218e80c048c613ef90359

    • SHA256

      d1e47440f39aa38030291c418b411fdb89e30cf8b909069da2c3b70fb02c8051

    • SHA512

      d75fe63e440260c701fecb500e2f8f62e97207f31610d6a93b28fa0f33a0df9d80c665c1e86692933862cb1ecc4979f48aa643b0ad95aa484d6822a24bd44434

    • SSDEEP

      49152:q2daHSl4E1Kn2w719v6ODWb2h7dk2YCRq7fjN8QC7a0N9esKsJIV4:P1K2Vio2h7G2YCRq7h5C7aHs7o

    Score
    10/10
    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks