General

  • Target

    719e19ead52a80b15bf887f3b9a6ab6d50c15d026766db41302c5e4b12949295.dll

  • Size

    72KB

  • MD5

    cff9d6bc7a7fa11284f260cd7c46d974

  • SHA1

    6af33a6c0258b4c72d566a67fa033e2e0b61513e

  • SHA256

    719e19ead52a80b15bf887f3b9a6ab6d50c15d026766db41302c5e4b12949295

  • SHA512

    e429d0712be34312da98d23bdbb848f92a226e9151b9a8b70608da844e192fdc4285982668d18aab6955b3ce0a8e0647348c32a553b3d65188f959cbbb1b364c

  • SSDEEP

    1536:czhhNZ0O/Zs2M+RBHA8X6jK4meixMRdgf8QQhIJoT1s:czhhPJZM+08X6jKZZMjgkQQhIAi

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://piloferstaf.com/test/

https://ypredoninen.com/test/

Attributes
  • group

    Sigma

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Signatures

  • Detects Latrodectus 1 IoCs

    Detects Latrodectus v1.4.

  • Latrodectus family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 719e19ead52a80b15bf887f3b9a6ab6d50c15d026766db41302c5e4b12949295.dll
    .dll windows:5 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections