latrodectus | Update_9b2e8e34[.]dll

General

Target
Update_9b2e8e34.dll
Size 69KB
Sample240411-3fyt2sgf62
SHA256 fc21a125287c3539e11408587bcaa6f3b54784d9d458facbc54994f05d7ef1b0
MD5 c189e585a4aea11380082f7c25aef6b8
SHA1 3d84e7bdd40cd41df467830563d0f62779469a1b
SHA512 f25cc7078bea3d2ae952a8d7406fb61fa6954d848e9a1f1ac6f5c4ff7151955c10531e7ce6c98baaacc4068ee6c8245a886eca41d0906c0d847d6fcf5158a47b
SSDEEP 768:RvrkZkx7jOx10Io0O99dyyus8GgrFuNtxv4c/HFGKndcHrqzwzvCoQ5w7t:Rv1dj7aO9qyV8Kv4c/HFGLlzKoQi
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detect larodectus Loader variant 2 1 IoCs

loader

resource	yara_rule
sample	family_latrodectus_v2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Update_9b2e8e34.dll

IMPHASH ecb712bfe0d1558ffce8f8c2df526278
SHA256 fc21a125287c3539e11408587bcaa6f3b54784d9d458facbc54994f05d7ef1b0
MD5 c189e585a4aea11380082f7c25aef6b8
SHA1 3d84e7bdd40cd41df467830563d0f62779469a1b
SHA512 f25cc7078bea3d2ae952a8d7406fb61fa6954d848e9a1f1ac6f5c4ff7151955c10531e7ce6c98baaacc4068ee6c8245a886eca41d0906c0d847d6fcf5158a47b
SSDEEP 768:RvrkZkx7jOx10Io0O99dyyus8GgrFuNtxv4c/HFGKndcHrqzwzvCoQ5w7t:Rv1dj7aO9qyV8Kv4c/HFGLlzKoQi
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

6

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths