General

  • Target

    UpdaterTag.dll

  • Size

    61KB

  • MD5

    be06d0b1863afe4ef8228734497bf070

  • SHA1

    01bc9765d91506de98fdc7100a8cbf29a00c42bf

  • SHA256

    6efecfde145da3e885b576c5ad101ef2bbfc992b1daaf639d6466e0f34a291ca

  • SHA512

    11e537ca7833128fe0019b7c6c2422e5ec129969cdd7b537addef8fc032d91507ad664b3fa5dcaa685f6dde28dc6aa3391e3d6e8ee207662ecbd6b5276f44da4

  • SSDEEP

    768:mzsvRTYSfv3nabO35TxhKaS8TAu0X8w4jU2zRobK3Jj6abTFUK8CCLicljcTqgu:mzcnnoORm8Jh1RoGZO0ADicVPg

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://forefilarem.com/test/

https://xiolewarentiom.com/test/

aes.hex

Signatures

  • Detects Latrodectus 1 IoCs

    Detects Latrodectus v1.4.

  • Latrodectus family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • UpdaterTag.dll
    .dll windows:5 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections