Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

05/04/2024, 15:12

240405-slem9afg98 10

05/04/2024, 15:09

240405-sjgptsfg52 3

28/11/2023, 12:01

231128-n65b7ahg51 8

General

  • Target

    dat.dat

  • Size

    1.5MB

  • Sample

    240405-slem9afg98

  • MD5

    1cab91c58f43f65f1b0ce3263a474984

  • SHA1

    81d2e33b9b181983edce24b90d961eb4267a8e87

  • SHA256

    97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2

  • SHA512

    657222b4ce2b3385938f1c7e144641e47af63d87640b8843d21b1c72d4684a81960df52f4d72745ba6b9854f757f70751b0f23b08d7c4990274be964f2716330

  • SSDEEP

    12288:13ZJHttTLoh9ZyM67XI25/XAeWXiULji9G7Cw:133HTLoh9ZyMY425/Q3iUL+9M

Score
10/10

Malware Config

Extracted

Family

latrodectus

Version

1.0

C2

https://peermangoz.me/live/

https://aprettopizza.world/live/

Attributes
  • group

    Olimp

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

Targets

    • Target

      dat.dat

    • Size

      1.5MB

    • MD5

      1cab91c58f43f65f1b0ce3263a474984

    • SHA1

      81d2e33b9b181983edce24b90d961eb4267a8e87

    • SHA256

      97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2

    • SHA512

      657222b4ce2b3385938f1c7e144641e47af63d87640b8843d21b1c72d4684a81960df52f4d72745ba6b9854f757f70751b0f23b08d7c4990274be964f2716330

    • SSDEEP

      12288:13ZJHttTLoh9ZyM67XI25/XAeWXiULji9G7Cw:133HTLoh9ZyMY425/Q3iUL+9M

    Score
    10/10
    • Latrodectus family

    • Latrodectus loader

      Latrodectus is a loader written in C++.

    • Detect larodectus Loader variant 1

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks