extra
follower
run
scub
Behavioral task
behavioral1
Sample
805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7.dll
Resource
win10v2004-20240419-en
Target
441ce23f19aa042727acff5787e06d9d.bin
Size
24KB
MD5
497ef1635b09f659a8374b183d078b7a
SHA1
626bb3848591c50e0acd6d722a60231a00c7726d
SHA256
46e1556fb474cf1d27b2defa1364e81cf25a89789baef36594fd7d5d190d83ed
SHA512
c951a8a76faeb479ea1eb7411ff408155fb4e76f8c50fab6a2aac5e4b22c78891cff7d97a47bb1348e982afa855dc5864d1a2dc873b8cb12baa395256e01429e
SSDEEP
768:nIIois815/xrQjC1e6l/nSOBnrerbZUkSYlRv:YGrQ2o8/j4rRS6Rv
latrodectus
https://titnovacrion.top/live/
https://skinnyjeanso.com/live/
resource | yara_rule |
---|---|
static1/unpack001/805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7.exe | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
unpack001/805b59e48af90504024f70124d850870a69b822b8e34d1ee551353c42a338bf7.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ