Overview

overview

10

Static

static

3

napcrypt.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    napcrypt.DLL

  • Size

    2.7MB

  • Sample

    250328-q5d5qaymx5

  • MD5

    6a8f186493ab6e188655ffc78b602f13

  • SHA1

    7457b597c1674c26d4f6186159181548ffa7a61b

  • SHA256

    5d346e5eae36f10e4d966fec7d85416a8c9cbeedf72933dbbc6ad81d0d221ac6

  • SHA512

    af28676205819697ce36a605436a3b24c63020cebe6197486d86759f2bee4b3a2508154b9dd2184a56898830d8039a1aa7b8aa7ab7e0ce1acb9793e3160569cd

  • SSDEEP

    49152:EjZMJvHBps+E2UVASA6+HGC/eqSqmO2mXWxVpSSiuMz5coGhiJ5rik8bKtXP:MM9MO2NFU5cokiJywX

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://forefilarem.com/test/

https://grazafnulp.com/test/
aes.hex

Targets

    • Target

      napcrypt.DLL

    • Size

      2.7MB

    • MD5

      6a8f186493ab6e188655ffc78b602f13

    • SHA1

      7457b597c1674c26d4f6186159181548ffa7a61b

    • SHA256

      5d346e5eae36f10e4d966fec7d85416a8c9cbeedf72933dbbc6ad81d0d221ac6

    • SHA512

      af28676205819697ce36a605436a3b24c63020cebe6197486d86759f2bee4b3a2508154b9dd2184a56898830d8039a1aa7b8aa7ab7e0ce1acb9793e3160569cd

    • SSDEEP

      49152:EjZMJvHBps+E2UVASA6+HGC/eqSqmO2mXWxVpSSiuMz5coGhiJ5rik8bKtXP:MM9MO2NFU5cokiJywX

    Score
    10/10
    latrodectusloader

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

      latrodectus

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Blocklisted process makes network request

    behavioral1

MITRE ATT&CK Matrix

Tasks