Overview

overview

10

Static

static

10

08dcb808c9...96.exe

windows7-x64

10

08dcb808c9...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08dcb808c9d105311bd9d617863f1c63e8c8ca475162ca8e4e0fc9d984ba1b96.exe

  • Size

    70KB

  • MD5

    a15e50203c165fa46adf70ebcd4b80a9

  • SHA1

    4f66eb1a959221d5365d2c7ed5504e0ddf83fda5

  • SHA256

    08dcb808c9d105311bd9d617863f1c63e8c8ca475162ca8e4e0fc9d984ba1b96

  • SHA512

    f35f0e83d7c7c0d3c2407022373844a23c2e901f6c1036a77b3bb9243a1bb3341926d2ed9907a415680ec5d2bd4a645a115d7a3ab5c8e4563430e83dadff2cb4

  • SSDEEP

    1536:pzhZtKO78VABOf6/KnaV0ISeuf8cq6G/kl:pzhZtb8VSf/Knaigukcqp

Score
10/10
latrodectus

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://piloferstaf.com/test/

https://ypredoninen.com/test/
Attributes
  • group

    Sigma

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Signatures

  • Detects Latrodectus 1 IoCs

    Detects Latrodectus v1.4.

  • Latrodectus family
    latrodectus
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08dcb808c9d105311bd9d617863f1c63e8c8ca475162ca8e4e0fc9d984ba1b96.exe
    .exe windows:5 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Sections