extra
follower
run
scub
Behavioral task
behavioral1
Sample
6091f2589fef42e0ab3d7975806cd8a0da012b519637c03b73f702f7586b21ef.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6091f2589fef42e0ab3d7975806cd8a0da012b519637c03b73f702f7586b21ef.dll
Resource
win10v2004-20240426-en
Target
6091f2589fef42e0ab3d7975806cd8a0da012b519637c03b73f702f7586b21ef
Size
59KB
MD5
71d29d71641017e51b3685ce2f417796
SHA1
e456eb06758c7349a3636c15c91e1a9c30bb7927
SHA256
6091f2589fef42e0ab3d7975806cd8a0da012b519637c03b73f702f7586b21ef
SHA512
717427e1b6224e006ca5cd8a78fc799c04558dc2fe32f1fab29697907d65239b966b888842a1d0747e5310b5515d204801ec959362f3e891a97d18eb81d7372b
SSDEEP
768:ri0IIO99dKJKbA5QVuyQw4n4mjlQmLvniWiMfDeDvL1Rt:bpO9CJKiQF4n4mjltqTMKDT1
latrodectus
https://titnovacrion.top/live/
https://skinnyjeanso.com/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
6091f2589fef42e0ab3d7975806cd8a0da012b519637c03b73f702f7586b21ef |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ