General

  • Target

    UpdaterTag.dll

  • Size

    72KB

  • MD5

    baff48ded319cdc1eb2372e16c833260

  • SHA1

    6ffbbee909e8225337a61da43f18d48bd403b32d

  • SHA256

    16bf1c6d22074a7532c158c0f8ffd7f1e1c36deab934ea5abad5c0d2cea11a62

  • SHA512

    ce560c27b4403ba9e9b14a7398e469e6fc42f79b70586266ae2d2b2210a9f81ea88e92a6f50b077e8480bc5fa9117d64acf1a6b3b3530807bd1534e5aac2cce6

  • SSDEEP

    768:Tz7vRTYS4Oi5ONdWJ7HRCRuVnxsaQu7SDqRefml4I4QDqauXj57CHf8IdAtY5h82:Tzh7eO6hHRCSsBfml4I6z5If8I6oVTt

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://apworsindos.com/test/

https://reminasolirol.com/test/

Attributes
  • group

    Mimikast

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Signatures

  • Detects Latrodectus 1 IoCs

    Detects Latrodectus v1.4.

  • Latrodectus family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • UpdaterTag.dll
    .dll windows:5 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections