Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dat.dll

windows7-x64

10

dat.dll

windows10-2004-x64

10

Resubmissions

05/04/2024, 15:12

240405-slem9afg98 10

05/04/2024, 15:09

240405-sjgptsfg52 3

28/11/2023, 12:01

231128-n65b7ahg51 8

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • submitted
    05/04/2024, 15:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dat.dll

  • Size

    1.5MB

  • MD5

    1cab91c58f43f65f1b0ce3263a474984

  • SHA1

    81d2e33b9b181983edce24b90d961eb4267a8e87

  • SHA256

    97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2

  • SHA512

    657222b4ce2b3385938f1c7e144641e47af63d87640b8843d21b1c72d4684a81960df52f4d72745ba6b9854f757f70751b0f23b08d7c4990274be964f2716330

  • SSDEEP

    12288:13ZJHttTLoh9ZyM67XI25/XAeWXiULji9G7Cw:133HTLoh9ZyMY425/Q3iUL+9M

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

Version

1.0

C2

https://peermangoz.me/live/

https://aprettopizza.world/live/
Attributes
  • group

    Olimp

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

Signatures

  • Latrodectus family
    latrodectus
  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus
  • Detect larodectus Loader variant 1 1 IoCs
    loader
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\dat.dll,nail
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2100-0-0x0000000180000000-0x0000000180188000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/2100-1-0x0000000000390000-0x0000000000394000-memory.dmp

    Filesize

    16KB

    Download

  • memory/2100-2-0x00000000003A0000-0x00000000003B3000-memory.dmp

    Filesize

    76KB

    Download