Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

lact/1364-...ed.dll

windows7-x64

1

lact/1364-...ed.dll

windows10-2004-x64

10

lact/1636-...ed.dll

windows7-x64

1

lact/1636-...ed.dll

windows10-2004-x64

10

lact/1684-...ed.dll

windows7-x64

1

lact/1684-...ed.dll

windows10-2004-x64

10

lact/1944-...ed.dll

windows7-x64

1

lact/1944-...ed.dll

windows10-2004-x64

10

lact/2092-...ry.dll

windows7-x64

1

lact/2092-...ry.dll

windows10-2004-x64

1

lact/2100-...ed.dll

windows7-x64

1

lact/2100-...ed.dll

windows10-2004-x64

10

lact/2324-...ed.dll

windows7-x64

1

lact/2324-...ed.dll

windows10-2004-x64

10

lact/2956-...ed.dll

windows7-x64

1

lact/2956-...ed.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lact.zip

  • Size

    617KB

  • MD5

    32d69bb674f227a955330418eaa3e1f8

  • SHA1

    0611088598e651977926606cfa90649e9934c241

  • SHA256

    2f3dd9fe96b27664d4ac558c6c538f59a04db5a3f7d1923b83473b5f7603d187

  • SHA512

    5d961464fba8f815cd59265fffff623a0e86699c9d41f52e4415d7ea68021834f11e4b512f18c250ccd6ed625c03c8b460ef15c7c74c3df009b0e47cfbd68bba

  • SSDEEP

    12288:8HmycLEK72WDEiSx1oXtOkQbufc81N6W3svWN8wSdDG/NzMUrrP:NycJ9Sx1o9X1NKw4G/NzB/

Score
10/10
loaderlatrodectus

Malware Config

Extracted

Family

latrodectus

C2

https://titnovacrion.top/live/

https://grunzalom.fun/live/

https://plwskoret.top/live/

https://miistoria.com/live/

https://aytobusesre.com/live/

https://scifimond.com/live/

https://mazdakrichest.com/live/

https://riverhasus.com/live/

https://fluraresto.me/live/

https://mastralakkot.live/live/

https://peermangoz.me/live/

https://aprettopizza.world/live/

https://drifajizo.fun/live/

https://zumkoshapsret.com/live/

https://jertacco.com/live/

Signatures

  • Detect larodectus Loader variant 1 4 IoCs
    loader
  • Detect larodectus Loader variant 2 4 IoCs
    loader
  • Latrodectus family
    latrodectus
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • lact.zip
    .zip
  • lact/1364-1-0x0000020751220000-0x0000020751234000-memory_unmapped.dmp
    .dll windows:6 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections

  • lact/1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dmp
    .dll windows:6 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections

  • lact/1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dmp.i64
  • lact/1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dmp.id0
  • lact/1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dmp.id1
  • lact/1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dmp.id2
  • lact/1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dmp.nam
  • lact/1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dmp.til
  • lact/1684-0-0x0000000001D20000-0x0000000001D34000-memory_unmapped.dmp
    .dll windows:6 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections

  • lact/1944-1-0x000001FE0BA80000-0x000001FE0BA93000-memory_unmapped.dmp
    .dll windows:6 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections

  • lact/2092-0-0x0000000000150000-0x0000000000163000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • lact/2100-2-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dmp
    .dll windows:6 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections

  • lact/2324-0-0x0000000000130000-0x0000000000144000-memory_unmapped.dmp
    .dll windows:6 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections

  • lact/2956-0-0x0000000001B60000-0x0000000001B74000-memory_unmapped.dmp
    .dll windows:6 windows x64 arch:x64

    db7aeb75528663639689f852fd366243


    Headers

    Imports

    Exports

    Sections