extra
follower
run
scub
Behavioral task
behavioral1
Sample
9645a12079edffd20560d4631160a6052ae5728d6f73b7366588166ad281c534.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9645a12079edffd20560d4631160a6052ae5728d6f73b7366588166ad281c534.dll
Resource
win10v2004-20240704-en
Target
9645a12079edffd20560d4631160a6052ae5728d6f73b7366588166ad281c534
Size
60KB
MD5
d46476f7f27be8ef618b7646a46f5e66
SHA1
8219d1ead31d16f6380941827bf96a488453d5c0
SHA256
9645a12079edffd20560d4631160a6052ae5728d6f73b7366588166ad281c534
SHA512
8efba2b2cb757decc55c7b2aedb1a7b2645d95ddb22087f20d713456bfb6d09b90779370e7c8d8e567d22d8e96d7239f9b65152c6879cbdf9258cf02f690c7a0
SSDEEP
768:f0Io0O99dyyus8GhrFuNtxv4c/HFGKndcHrqzwzv1NTNaTWsyih:caO9qyVNKv4c/HFGLlzvi
latrodectus
https://winarkamaps.com/live/
https://stratimasesstr.com/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
9645a12079edffd20560d4631160a6052ae5728d6f73b7366588166ad281c534 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ