Analysis
-
max time kernel
785s -
max time network
788s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
28/03/2025, 13:50
General
-
Target
napcrypt.dll
-
Size
2.7MB
-
MD5
6a8f186493ab6e188655ffc78b602f13
-
SHA1
7457b597c1674c26d4f6186159181548ffa7a61b
-
SHA256
5d346e5eae36f10e4d966fec7d85416a8c9cbeedf72933dbbc6ad81d0d221ac6
-
SHA512
af28676205819697ce36a605436a3b24c63020cebe6197486d86759f2bee4b3a2508154b9dd2184a56898830d8039a1aa7b8aa7ab7e0ce1acb9793e3160569cd
-
SSDEEP
49152:EjZMJvHBps+E2UVASA6+HGC/eqSqmO2mXWxVpSSiuMz5coGhiJ5rik8bKtXP:MM9MO2NFU5cokiJywX
Score
10/10
Malware Config
Extracted
Family
latrodectus
Version
1.4
C2
https://forefilarem.com/test/
https://grazafnulp.com/test/
aes.hex
Signatures
-
Detects Latrodectus 1 IoCs
Detects Latrodectus v1.4.
-
Latrodectus family
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Blocklisted process makes network request 4 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\napcrypt.dll,#11⤵
- Blocklisted process makes network request
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.8MB
-
Filesize
84KB
-
Filesize
4KB
-
Filesize
2.8MB