extra
follower
run
scub
Behavioral task
behavioral1
Sample
a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598.dll
Resource
win10v2004-20240419-en
Target
a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598.exe
Size
61KB
MD5
277c879bba623c8829090015437e002b
SHA1
897c609bbee39144798b400525bf8f59a51c2ff1
SHA256
a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598
SHA512
5a4ec48004c84c29ed07af3cb8b9c2a82297e787ae0d3b41a208de62f06dd383ac1187d12d0bf4b4d2a9268f28bbe3f430043be99d44d8b71a5135c05f89162f
SSDEEP
768:+i0IIO99dKJKbAgQVuyQw4n4mjlQmLvniWiMfDeDvhHImz:ipO9CJKrQF4n4mjltqTMKD5H
latrodectus
https://titnovacrion.top/live/
https://skinnyjeanso.com/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ