extra
follower
run
scub
Behavioral task
behavioral1
Sample
805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7.dll
Resource
win10v2004-20240419-en
Target
805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7.exe
Size
60KB
MD5
441ce23f19aa042727acff5787e06d9d
SHA1
d907481fbcb17743d312e2e9f1aa855a1abdd24c
SHA256
805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7
SHA512
349225f3541e3a8e6152df99a702065f880eb4d43a3909293f95ae97b3756145e1d95b4ecc128591f802edee783942e50797080233b2f563acf21827cff66284
SSDEEP
768:+i0IIO99dKJKbAgQVuyQw4n4mjlQmLvniWiMfDeDvhHImz:ipO9CJKrQF4n4mjltqTMKD5H
latrodectus
https://titnovacrion.top/live/
https://skinnyjeanso.com/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ