General
- Target falcon.dll
- Size 694KB
- Sample240405-snretsfh64
- SHA256 aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c
- MD5 da8ae8e1de522b20a462239c6893613e
- SHA1 7f65ef885815d81d220f9f42877ff0d696b0134c
- SHA512 d2dca9ba9272a0bdfa88f7520545e21a1f4d18dcacec36b072369cee8e28ba635a0214b47caef74b6f7fcd06e120d898da997e71c8955c72510972c66d2a855d
- SSDEEP 12288:tBx7p/GvTjNe0Za4+Lpf6DdeFvSMX/ekiBvu7FYgN96:tBx7FGvvNea+tSDoFvB/edBB
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
falcon.dll
Resource
win7-20240220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
falcon.dll
Resource
win10v2004-20240226-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
latrodectus
C2
-
https://aytobusesre.com/live/
-
https://scifimond.com/live/
Targets
-
- Target falcon.dll
- Size 694KB
- SHA256 aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c
- MD5 da8ae8e1de522b20a462239c6893613e
- SHA1 7f65ef885815d81d220f9f42877ff0d696b0134c
- SHA512 d2dca9ba9272a0bdfa88f7520545e21a1f4d18dcacec36b072369cee8e28ba635a0214b47caef74b6f7fcd06e120d898da997e71c8955c72510972c66d2a855d
- SSDEEP 12288:tBx7p/GvTjNe0Za4+Lpf6DdeFvSMX/ekiBvu7FYgN96:tBx7FGvvNea+tSDoFvB/edBB
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect larodectus Loader variant 2
-
Deletes itself
-
Loads dropped DLL