General

  • Target
    507e5c7af00ae92537f782f9be70a9672260ebc222a07d744eb9d174d2f8fa1a.bin
  • Size 199KB
  • Sample260608-tzgv7sb16w
  • SHA256 507e5c7af00ae92537f782f9be70a9672260ebc222a07d744eb9d174d2f8fa1a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • latrodectus

C2
  • https://carflotyup.com/live/

  • https://worlpquano.com/live/

Attributes
  • group

    Neptun

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

Targets

    • Target
      507e5c7af00ae92537f782f9be70a9672260ebc222a07d744eb9d174d2f8fa1a.bin
    • Size 199KB
    • SHA256 507e5c7af00ae92537f782f9be70a9672260ebc222a07d744eb9d174d2f8fa1a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Latrodectus loader

      Latrodectus is a loader written in C++.

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks