General

  • Target

    UpdaterTag.dll

  • Size

    72KB

  • MD5

    bcdf04fb5b921b898389482400e39187

  • SHA1

    f5284c8a66b7b5202547515fe34c3c5294620dd5

  • SHA256

    6ca8800c6d3cd512e7ae72e1262408f7e00c1df0e50fd468b63d09c52835824e

  • SHA512

    0b2100b57bb438c9aecdcb27f345614e89ba13a8271474b834af67afae6b316c4df93ad55ecf4b44b96e1c08a45ad6609313b84ef75af6530843a1ca7574c758

  • SSDEEP

    1536:Tzh7eO6hHRCWqBfml4I6z5If8IM4Ny9KW:Tzh7WZIWWfmlAIkIM4YKW

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://vivaforevew.com/test/

https://wersogkiwgow.com/test/

Attributes
  • group

    Omega

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Signatures

  • Detects Latrodectus 1 IoCs

    Detects Latrodectus v1.4.

  • Latrodectus family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • UpdaterTag.dll
    .dll windows:5 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections