extra
follower
run
scub
Behavioral task
behavioral1
Sample
a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598.dll
Resource
win10v2004-20240419-en
Target
277c879bba623c8829090015437e002b.bin
Size
25KB
MD5
cbf44ff2019cb57fa9c1d850784462b5
SHA1
f3ec74b3eeaaa35fd6394886de5706a945d50207
SHA256
4bc6f0e2484aa666311111e5a7d4b3480756ef9eff291847e826d35125fa83f3
SHA512
244c4e5423be664207fa9193935f53711ea22b2005780298b237c27c10f2466909d4508145ba04a2d0f48c750d500eb983829126d5899891c9932927680a24ac
SSDEEP
768:4wdQ8FdxAp9wBBuyGLC4vU6l9XXg50vb0:ZpxAnYB2m4sm9XXge0
latrodectus
https://titnovacrion.top/live/
https://skinnyjeanso.com/live/
resource | yara_rule |
---|---|
static1/unpack001/a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598.exe | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
unpack001/a1e74120c32162d18c0245a8390360e9b63a11887e396c270e0ed35296952598.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ