extra
follower
run
scub
Behavioral task
behavioral1
Sample
6070000.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6070000.dll
Resource
win10v2004-20240508-en
Target
6070000.dll
Size
68KB
MD5
d54d899ec9e4555777439bf6d734a745
SHA1
b9b511f4d6e6faff0bd2a7bb93ff3d37ee6211f1
SHA256
4089f000d8345012ec48d4e6ab6462d4310dce81a152b185cd9f8a5ac8ae7088
SHA512
083452fe90888c16fb8745bc094258f32aaf09fd9d38ee5f5a400ba6578bcb1f95c1fc2eed289bac55624261e2270dbf766f8187606f399f1fc286a66a4ab3bf
SSDEEP
768:kX755uspugOulWKxZu4faayRHXrqCzlFC+OuyWUpWad:GuYO84ayR7qAlU2
latrodectus
https://workspacin.cloud/live/
https://illoskanawer.com/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
6070000.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ