General

  • Target

    D3D10Ref.dll

  • Size

    2.7MB

  • Sample

    250326-sat9kaypy5

  • MD5

    237cb53e11bfeffe4cbca7db47be12f0

  • SHA1

    523631dd20ee0eac9cc64c9feb54d91251d68e03

  • SHA256

    21479f35e8a3717a5b27202497a2d6e2c8cbf4735c3fef0f3e729b430a375e20

  • SHA512

    e78b30d4f9cb2268f53fdbefbea352f785eb78ef0f05e2abd37319ae0966440c69c00718461409d2046d63c05fbaae24e84f9b019466c216a9f72ed5aef84ce5

  • SSDEEP

    49152:5sYeNTrG1MxkJYEo2dc9cDeBGGJGpD/dv0sQy5XZZpATe0cWS6Uu6iClbGaPT:55R4GUouC0cPFu8FG

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://forefilarem.com/test/

https://xiolewarentiom.com/test/

aes.hex

Targets

    • Target

      D3D10Ref.dll

    • Size

      2.7MB

    • MD5

      237cb53e11bfeffe4cbca7db47be12f0

    • SHA1

      523631dd20ee0eac9cc64c9feb54d91251d68e03

    • SHA256

      21479f35e8a3717a5b27202497a2d6e2c8cbf4735c3fef0f3e729b430a375e20

    • SHA512

      e78b30d4f9cb2268f53fdbefbea352f785eb78ef0f05e2abd37319ae0966440c69c00718461409d2046d63c05fbaae24e84f9b019466c216a9f72ed5aef84ce5

    • SSDEEP

      49152:5sYeNTrG1MxkJYEo2dc9cDeBGGJGpD/dv0sQy5XZZpATe0cWS6Uu6iClbGaPT:55R4GUouC0cPFu8FG

    Score
    10/10
    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks