Overview

overview

10

Static

static

10

08dcb808c9...96.exe

windows7-x64

10

08dcb808c9...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08dcb808c9d105311bd9d617863f1c63e8c8ca475162ca8e4e0fc9d984ba1b96.exe

  • Size

    70KB

  • Sample

    250129-wrrfsavpf1

  • MD5

    a15e50203c165fa46adf70ebcd4b80a9

  • SHA1

    4f66eb1a959221d5365d2c7ed5504e0ddf83fda5

  • SHA256

    08dcb808c9d105311bd9d617863f1c63e8c8ca475162ca8e4e0fc9d984ba1b96

  • SHA512

    f35f0e83d7c7c0d3c2407022373844a23c2e901f6c1036a77b3bb9243a1bb3341926d2ed9907a415680ec5d2bd4a645a115d7a3ab5c8e4563430e83dadff2cb4

  • SSDEEP

    1536:pzhZtKO78VABOf6/KnaV0ISeuf8cq6G/kl:pzhZtb8VSf/Knaigukcqp

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://piloferstaf.com/test/

https://ypredoninen.com/test/
Attributes
  • group

    Sigma

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Targets

    • Target

      08dcb808c9d105311bd9d617863f1c63e8c8ca475162ca8e4e0fc9d984ba1b96.exe

    • Size

      70KB

    • MD5

      a15e50203c165fa46adf70ebcd4b80a9

    • SHA1

      4f66eb1a959221d5365d2c7ed5504e0ddf83fda5

    • SHA256

      08dcb808c9d105311bd9d617863f1c63e8c8ca475162ca8e4e0fc9d984ba1b96

    • SHA512

      f35f0e83d7c7c0d3c2407022373844a23c2e901f6c1036a77b3bb9243a1bb3341926d2ed9907a415680ec5d2bd4a645a115d7a3ab5c8e4563430e83dadff2cb4

    • SSDEEP

      1536:pzhZtKO78VABOf6/KnaV0ISeuf8cq6G/kl:pzhZtb8VSf/Knaigukcqp

    Score
    10/10
    latrodectusloader

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

      latrodectus

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks