extra
follower
run
scub
Behavioral task
behavioral1
Sample
465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7.dll
Resource
win10v2004-20240419-en
Target
22f06d9fc9d95f0945fc6113c091a072.bin
Size
24KB
MD5
4ac9a7ffa74a53f3c3f3abe2446cb303
SHA1
bd50fbea1f508f689a8e1c1c57b190a867de592c
SHA256
5bdbaddfb5463aa7bcaf509262bdfadb5fceb803a2102d5abafb4db48359f2ae
SHA512
d97373ab7a03f340afa503ca1babce2d320d648d5994a2ee0f8b8f0a5437f2b0bdead2dc84b915e41afa6281af2004650fc09533314d78cfe7380d2cf26d5b10
SSDEEP
768:zz4Psvnj1mULX3/9RZ6pQeoMgCPiBolpeM:vHvnhJ6nXKolMM
latrodectus
https://winarkamaps.com/live/
https://stratimasesstr.com/live/
resource | yara_rule |
---|---|
static1/unpack001/465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7.exe | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
unpack001/465f931e8a44b7f8dff8435255240b88f88f11e23bc73741b21c20be8673b6b7.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ