General

  • Target

    UpdaterTag.dll

  • Size

    72KB

  • Sample

    250206-x8mdtsvjet

  • MD5

    bcdf04fb5b921b898389482400e39187

  • SHA1

    f5284c8a66b7b5202547515fe34c3c5294620dd5

  • SHA256

    6ca8800c6d3cd512e7ae72e1262408f7e00c1df0e50fd468b63d09c52835824e

  • SHA512

    0b2100b57bb438c9aecdcb27f345614e89ba13a8271474b834af67afae6b316c4df93ad55ecf4b44b96e1c08a45ad6609313b84ef75af6530843a1ca7574c758

  • SSDEEP

    1536:Tzh7eO6hHRCWqBfml4I6z5If8IM4Ny9KW:Tzh7WZIWWfmlAIkIM4YKW

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://vivaforevew.com/test/

https://wersogkiwgow.com/test/

Attributes
  • group

    Omega

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Targets

    • Target

      UpdaterTag.dll

    • Size

      72KB

    • MD5

      bcdf04fb5b921b898389482400e39187

    • SHA1

      f5284c8a66b7b5202547515fe34c3c5294620dd5

    • SHA256

      6ca8800c6d3cd512e7ae72e1262408f7e00c1df0e50fd468b63d09c52835824e

    • SHA512

      0b2100b57bb438c9aecdcb27f345614e89ba13a8271474b834af67afae6b316c4df93ad55ecf4b44b96e1c08a45ad6609313b84ef75af6530843a1ca7574c758

    • SSDEEP

      1536:Tzh7eO6hHRCWqBfml4I6z5If8IM4Ny9KW:Tzh7WZIWWfmlAIkIM4YKW

    Score
    10/10
    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks