General

  • Target

    1528-43-0x00000000001B0000-0x00000000001C4000-memory.dmp

  • Size

    80KB

  • MD5

    6a055a1d9034d81a99be741793b0d885

  • SHA1

    f1c7533d3acac8cc80d3068e614a42f788b1e7e1

  • SHA256

    e68c0df322df91bcc0d1b50881238728464a2bc05705925745df44877db2b6c4

  • SHA512

    5949ca9a5624aa57c99fbc4026fb39bb581f94678db4a96c0169a9a995f228cf1594f7820793a8392d02605934b780847adb3ddd36c473a5054067270356f952

  • SSDEEP

    768:iCIo0O99dyYus8VKEfuNtxv4c/HFGKndcHrqWwf8D5zGPMFf5I:TaO9qYVttv4c/HFGL2f8D57

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://jarinamaers.shop/live/

https://wrankaget.site/live/

Signatures

  • Detect larodectus Loader variant 2 1 IoCs
  • Latrodectus family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1528-43-0x00000000001B0000-0x00000000001C4000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections