General

  • Target

    adf05622d174be0d74cf9a19fb33b6c3bc0491dd32b71693487d0f1c36f14388.zip

  • Size

    573KB

  • Sample

    250129-rqmc8a1jdy

  • MD5

    ad749184b388f27382dc491666fbce4e

  • SHA1

    cc472d57855beee2553425d87615e93bbff9650a

  • SHA256

    7c215f4fd3e8ba16e970881e2886727a180572be382473e36c28dee3df0b851b

  • SHA512

    167cdaa5e0ab7180a1d26cfda54318c9f99bc667f27830e01abe4b83b95edf184f94a941b7583564c4ddbba5a2064fb541346030955ae1654cb04915c70828ea

  • SSDEEP

    12288:d/xIXDdwDWWEhIm0OV57cHHP6MCnbp/1JjUsGm:d/xIXqWWEGakAbp/Ljl3

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://piloferstaf.com/test/

https://ypredoninen.com/test/

Attributes
  • group

    Sigma

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Extracted

Family

latrodectus

aes.hex

Targets

    • Target

      adf05622d174be0d74cf9a19fb33b6c3bc0491dd32b71693487d0f1c36f14388.exe

    • Size

      1.4MB

    • MD5

      9c1602200e4b5003639415dba13ea5e6

    • SHA1

      f0cd4f3e407b540961b1b94186cb7fae481604a5

    • SHA256

      adf05622d174be0d74cf9a19fb33b6c3bc0491dd32b71693487d0f1c36f14388

    • SHA512

      a94edc5cdacc6dbffa4c6b35d5a7604b571b58c79f3ce9664a729ac4ad9a4d4a41aed714aa0aaeb5c6c0f4ba9d126d9a1cd998bdcae47db80baf6b9a8f708e33

    • SSDEEP

      24576:oHiXmF53kj7zIeoIU1EUVYwQHcTHToXoV0oZuy:oHWmF53kMxQ8THEt

MITRE ATT&CK Enterprise v15

Tasks