extra
follower
run
scub
Behavioral task
behavioral1
Sample
465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7.dll
Resource
win10v2004-20240419-en
Target
465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7.exe
Size
60KB
MD5
22f06d9fc9d95f0945fc6113c091a072
SHA1
672a5de375d84ac54ff1fc14ec65402c0abeca97
SHA256
465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7
SHA512
7126f2b549a1e746eab78e4b9b111d861b6b27d7ef07b4b73197e21b7544acc18597bc18579a5dc0a1b85e5c7e0bc69090601de6a2cb0b89a2c5fa64bcd2f09a
SSDEEP
768:f0Io0O99dyyus8GgrFuNtxv4c/HFGKndcHrqzwzvCoQ5w7t:caO9qyV8Kv4c/HFGLlzKoQi
latrodectus
https://winarkamaps.com/live/
https://stratimasesstr.com/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ