Overview

overview

10

Static

static

10

34aff17679...09.dll

windows7-x64

10

34aff17679...09.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 01:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    34aff1767909ff582d15949922549fddb5849f163260ad3efdc32d4f869fdf09.dll

  • Size

    69KB

  • MD5

    d32db5208d83134ba5c8d6b8c8289aeb

  • SHA1

    9866814c66431df3a6d96ac8c89ba535340f0ea0

  • SHA256

    34aff1767909ff582d15949922549fddb5849f163260ad3efdc32d4f869fdf09

  • SHA512

    5338d56d2a31836c9131e92fdfc48c1b9c40ce5c2c20fdb88902539937b064e78b36ff80cbc8d0f16ab75a5bed1d7acd22adde4602980d443cff82942eaf2b8a

  • SSDEEP

    768:RQrkZkx7jOxIi0IIO99dKJKbAgQVuyQw4n4mjlQmLvniWiMfDeDvhHImz:RQ1djxpO9CJKrQF4n4mjltqTMKD5H

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

C2

https://titnovacrion.top/live/

https://skinnyjeanso.com/live/

Signatures

  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus
  • Detect larodectus Loader variant 2 1 IoCs
    loader
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\34aff1767909ff582d15949922549fddb5849f163260ad3efdc32d4f869fdf09.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2364-0-0x0000000001D00000-0x0000000001D14000-memory.dmp

    Filesize

    80KB

    Download