Overview

overview

10

Static

static

3

3a7b4f31f1...5b.exe

windows7-x64

10

3a7b4f31f1...5b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a7b4f31f11884854c6eee060669d518aaba8a6ba311200aef7d775f3e38ea5b

  • Size

    3.4MB

  • Sample

    250303-xvy6gawlw8

  • MD5

    9499d9ca6a96c11439dc4e116bfae2ec

  • SHA1

    9e536f4faee5e196cce606db2a96a6d352953d99

  • SHA256

    3a7b4f31f11884854c6eee060669d518aaba8a6ba311200aef7d775f3e38ea5b

  • SHA512

    09c34580b34549ce7750ce0862a7f2582e0f75c1492dc2eff5c18b51d87860bc79f285a2e72ffde622df9a4f1c04d4e974fd5e74995d1c6e891eaca2fc8186dc

  • SSDEEP

    49152:102IVhuSr8IKwC6h1lgKlQAEijVvZek0jL2U0DITZOoJdlArtYtPtdJ+c1cTyyFH:2BhpFZsVZPl

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://formenista.com/test/

https://reidenhetic.com/test/
Attributes
  • group

    Delta

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Targets

    • Target

      3a7b4f31f11884854c6eee060669d518aaba8a6ba311200aef7d775f3e38ea5b

    • Size

      3.4MB

    • MD5

      9499d9ca6a96c11439dc4e116bfae2ec

    • SHA1

      9e536f4faee5e196cce606db2a96a6d352953d99

    • SHA256

      3a7b4f31f11884854c6eee060669d518aaba8a6ba311200aef7d775f3e38ea5b

    • SHA512

      09c34580b34549ce7750ce0862a7f2582e0f75c1492dc2eff5c18b51d87860bc79f285a2e72ffde622df9a4f1c04d4e974fd5e74995d1c6e891eaca2fc8186dc

    • SSDEEP

      49152:102IVhuSr8IKwC6h1lgKlQAEijVvZek0jL2U0DITZOoJdlArtYtPtdJ+c1cTyyFH:2BhpFZsVZPl

    Score
    10/10
    latrodectusloader

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

      latrodectus

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks