General
-
Target
falcon.dll
-
Size
694KB
-
Sample
240405-snretsfh64
-
MD5
da8ae8e1de522b20a462239c6893613e
-
SHA1
7f65ef885815d81d220f9f42877ff0d696b0134c
-
SHA256
aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c
-
SHA512
d2dca9ba9272a0bdfa88f7520545e21a1f4d18dcacec36b072369cee8e28ba635a0214b47caef74b6f7fcd06e120d898da997e71c8955c72510972c66d2a855d
-
SSDEEP
12288:tBx7p/GvTjNe0Za4+Lpf6DdeFvSMX/ekiBvu7FYgN96:tBx7FGvvNea+tSDoFvB/edBB
Static task
static1
Behavioral task
behavioral1
Sample
falcon.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
falcon.dll
Resource
win10v2004-20240226-en
Malware Config
Extracted
latrodectus
https://aytobusesre.com/live/
https://scifimond.com/live/
Targets
-
-
Target
falcon.dll
-
Size
694KB
-
MD5
da8ae8e1de522b20a462239c6893613e
-
SHA1
7f65ef885815d81d220f9f42877ff0d696b0134c
-
SHA256
aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c
-
SHA512
d2dca9ba9272a0bdfa88f7520545e21a1f4d18dcacec36b072369cee8e28ba635a0214b47caef74b6f7fcd06e120d898da997e71c8955c72510972c66d2a855d
-
SSDEEP
12288:tBx7p/GvTjNe0Za4+Lpf6DdeFvSMX/ekiBvu7FYgN96:tBx7FGvvNea+tSDoFvB/edBB
Score10/10-
Detect larodectus Loader variant 2
-
Deletes itself
-
Loads dropped DLL
-