extra
follower
run
scub
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
9f5b35edb30ad89c8eb3cf177ff0514b357b4e454661b7911242633aa6899e56.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9f5b35edb30ad89c8eb3cf177ff0514b357b4e454661b7911242633aa6899e56.dll
Resource
win10v2004-20240226-en
Target
9f5b35edb30ad89c8eb3cf177ff0514b357b4e454661b7911242633aa6899e56.dll
Size
63KB
MD5
3a2b8d59ce26f7db07bcf4d9f4cc1d3e
SHA1
2eefd756ade9c5ed99d0ac90fc1a28abb277264b
SHA256
9f5b35edb30ad89c8eb3cf177ff0514b357b4e454661b7911242633aa6899e56
SHA512
f1deff055f97fa35ed3803595ed1d933c932acc6309980defbef9fc0786455ad2ae68c569c21838182aa8268e3831052de797fdb9a9c1d5b13f952559a11138c
SSDEEP
768:Ti0IIO99dKJKbAoQVuyQw4n4mjlQmLvniWiMfDeDvQ1oOrApKxm:DpO9CJKjQF4n4mjltqTMKDymKx
latrodectus
https://titnovacrion.top/live/
https://grunzalom.fun/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
9f5b35edb30ad89c8eb3cf177ff0514b357b4e454661b7911242633aa6899e56.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ