Overview

overview

10

Static

static

10

719e19ead5...95.dll

windows7-x64

10

719e19ead5...95.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    719e19ead52a80b15bf887f3b9a6ab6d50c15d026766db41302c5e4b12949295.dll

  • Size

    72KB

  • Sample

    250129-w7xmqswkdz

  • MD5

    cff9d6bc7a7fa11284f260cd7c46d974

  • SHA1

    6af33a6c0258b4c72d566a67fa033e2e0b61513e

  • SHA256

    719e19ead52a80b15bf887f3b9a6ab6d50c15d026766db41302c5e4b12949295

  • SHA512

    e429d0712be34312da98d23bdbb848f92a226e9151b9a8b70608da844e192fdc4285982668d18aab6955b3ce0a8e0647348c32a553b3d65188f959cbbb1b364c

  • SSDEEP

    1536:czhhNZ0O/Zs2M+RBHA8X6jK4meixMRdgf8QQhIJoT1s:czhhPJZM+08X6jKZZMjgkQQhIAi

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://piloferstaf.com/test/

https://ypredoninen.com/test/
Attributes
  • group

    Sigma

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Targets

    • Target

      719e19ead52a80b15bf887f3b9a6ab6d50c15d026766db41302c5e4b12949295.dll

    • Size

      72KB

    • MD5

      cff9d6bc7a7fa11284f260cd7c46d974

    • SHA1

      6af33a6c0258b4c72d566a67fa033e2e0b61513e

    • SHA256

      719e19ead52a80b15bf887f3b9a6ab6d50c15d026766db41302c5e4b12949295

    • SHA512

      e429d0712be34312da98d23bdbb848f92a226e9151b9a8b70608da844e192fdc4285982668d18aab6955b3ce0a8e0647348c32a553b3d65188f959cbbb1b364c

    • SSDEEP

      1536:czhhNZ0O/Zs2M+RBHA8X6jK4meixMRdgf8QQhIJoT1s:czhhPJZM+08X6jKZZMjgkQQhIAi

    Score
    10/10
    latrodectusloader

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

      latrodectus

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks