Extracted

• • Target

    b85e22327b17da698f72e105d359f5873a8f2f4db38c6d76ec261df841288e74.exe

  • Size

    333KB

  • MD5

    a47952966449b8126698b9a1e98c39ff

  • SHA1

    89cddb3326fecfa8e5f159c1dc1d0e16094731ad

  • SHA256

    b85e22327b17da698f72e105d359f5873a8f2f4db38c6d76ec261df841288e74

  • SHA512

    d486287545c2cbe5ec2c449ba26468edbdf095645c9f47481c3b336696ec53e12b6aff1d4ef7ba2880c400b7799283b41370b9caa448355443ef73383e16bee2

  • SSDEEP

    6144:XWc/eO+AJdZU44m3q08bLUk8H6/Dsdp3DDEd3uOiq1wrkL:XWcYAJdZX4m3qp8H6/Dsz3DDRX4

  Score

  10^/10

  discoveryspywarestealerlatrodectusloader

  • Latrodectus family

    latrodectus

  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2