General
-
Target
a5124f400e74fcbc68fa4f6ce7af9379bdb7a3bdcc54da85f4700ac6ef499f94.zip
-
Size
376KB
-
Sample
240402-q7s2nacc6s
-
MD5
39a1f135d1b16dfe17d9665b58100016
-
SHA1
9607b03486cb9050a36b8ad09c2f19344548d10d
-
SHA256
b4d74473cb5f2aeed8ba8f2e54419370d6c6e5dd0cf3afa12259a000fed96101
-
SHA512
300c8e6d7e8bb80d3b7d8590ad0330f78d4183d015816843f53301c1cbc9e6e83437298827a49ae0f33e4ea483a2b73b11b694fc0dd53318ce70b36b4efdbae3
-
SSDEEP
6144:QkqPZXo99qB3a6VgflJm7WwZ7MZkjbu8J4fLkZi0XXCKGIEn05iEluP:Uxo4DscxukjL2f0xXCG5iBP
Static task
static1
Behavioral task
behavioral1
Sample
JDHSY373DE34DE.lnk
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
JDHSY373DE34DE.lnk
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
version1.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
version1.dll
Resource
win10v2004-20240226-en
Malware Config
Extracted
latrodectus
https://peermangoz.me/live/
https://aprettopizza.world/live/
Targets
-
-
Target
JDHSY373DE34DE.lnk
-
Size
838B
-
MD5
e329a92bc95c5a54492a483f8cf61ac1
-
SHA1
aca998cbead3c29b346a1e8d14d82a0281f65bfc
-
SHA256
49fb8c49c01a5f822417f1b9610bb8b9b808d0a0a3d09247b0a64961ede2e8b9
-
SHA512
bb426820583165354001bd6ae01b1ba1356f34d4c16cb32add1a5d1fdef0846033ca7cbee3bc4ac86e32bac226b54152dc160328b5381661be557c2d9b9ed714
Score10/10-
Detect larodectus Loader variant 1
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
-
-
Target
version1.dll
-
Size
1.5MB
-
MD5
b940f9dc5e1f90b9366af62399d9b147
-
SHA1
ed6367f231ae4c810342e3f31ff7f57738049469
-
SHA256
221e906b73db3dd177f65eba9310efeb2921f512d1eb67d516d8036b4193344e
-
SHA512
cc9d754e15259456ad4d0d3f459dfa2065bcc5ea266d4327f9050c27a33c4b4406ed862e2fcb1d4b7a1d37b2ac27d9e705ff7a0a3d7fb711f55dd7c955fa6843
-
SSDEEP
12288:e3ZJHttTLoh9ZyM67XI25eXAezXiULjiEG7:e33HTLoh9ZyMY425eQmiUL+E
Score1/10 -