Extracted

• • Target

    e9a007d03d495c867a25e655feace833390d24c781939398d6fb70ed4db4ad53.exe

  • Size

    11.1MB

  • MD5

    a6cf2e5db58c8490d5313639623fcd20

  • SHA1

    9ffae6b3e9630d52beaeb9c7e7da963d80ab9d1c

  • SHA256

    e9a007d03d495c867a25e655feace833390d24c781939398d6fb70ed4db4ad53

  • SHA512

    8e2b058d559b0c57b126ff5f4f3dcae6d721cbc3eeb39cb6583fbf23c6e52e0adf38713d4664621ea50bac6aa66653e41dbcd6ac2452c851587694d178fe9f78

  • SSDEEP

    196608:D52JzMnXtRXm1h6rwaLIjnVlaQK1EdUwr1ZdZ4PRfMXtNgIDo26b/WVyjKFdu9CR:ceRcKnIjn7K1E2wr1TZ4Pc9DChjKFduy

  Score

  10^/10

  latrodectusdiscoveryloaderspywarestealer

  • Latrodectus family

    latrodectus

  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2