General

  • Target

    1808-0-0x00000000001C0000-0x00000000001D4000-memory.dmp

  • Size

    80KB

  • MD5

    441fce09fd1df2e73866261f65b138f0

  • SHA1

    73a2b9a97e2a9668ecdb177311fe1b407067264c

  • SHA256

    2c9b47928c207ea67f08658f61d1aafedd8443e6640c5fb69249a127295ba5db

  • SHA512

    9a4f7d7cb6a9afb85384fce445dfaa07ec2bbab59fb9ac61618ab4dbeef438ea87e60a737fc835c8f413a09c69deb73c35eafcaff0ad78b6ef1a61ad078d2589

  • SSDEEP

    768:UCIo0O99dyYus8VIEfuNtxv4c/HFGKndcHrqWwf8D5z772961OGGQxcI:5aO9qYVXtv4c/HFGL2f8D5T2rGG

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://jarinamaers.shop/live/

https://startmast.shop/live/

Signatures

  • Detect larodectus Loader variant 2 1 IoCs
  • Latrodectus family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1808-0-0x00000000001C0000-0x00000000001D4000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections