Overview

overview

10

Static

static

10

3812-62-0x...ry.dll

windows7-x64

1

3812-62-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3812-62-0x0000016FCB300000-0x0000016FCB314000-memory.dmp

  • Size

    80KB

  • MD5

    58bcc0b37adbf8aa0862f79d547c9b92

  • SHA1

    9b0573efa4c4189c6041bf4c89b9ad853c76b81e

  • SHA256

    5126379962961347c0573fa2de2de95b0cdb75d636fd0e39c345fb1d967b54d5

  • SHA512

    9459802f50897aa6f32b394df23cb8be59702ffb82b04716f8beadc6ca8d01866a7c9a979abb5bace075af984afbb5a2ed1642613f490d5755ba961e5da689d3

  • SSDEEP

    768:HCIo0O99dyYus8VIEfuNtxv4c/HFGKndcHrqWwf8D5zf72961rGGQxNVURoI:iaO9qYVXtv4c/HFGL2f8D532aGGXR

Score
10/10
loaderlatrodectus

Malware Config

Extracted

Family

latrodectus

C2

https://jarinamaers.shop/live/

https://startmast.shop/live/

Signatures

  • Detect larodectus Loader variant 2 1 IoCs
    loader
  • Latrodectus family
    latrodectus
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3812-62-0x0000016FCB300000-0x0000016FCB314000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections