extra
follower
run
scub
Behavioral task
behavioral1
Sample
latrodectus.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
latrodectus.dll
Resource
win10v2004-20240709-en
Target
latrodectus.bin
Size
60KB
MD5
c92937c3724eb66de0011a363536e441
SHA1
9b72ed1bd2e7959d556f5705059326998aafd181
SHA256
d843d0016164e7ee6f56e65683985981fb14093ed79fde8e664b308a43ff4e79
SHA512
9f57186382af5f817f4c4ff19d53912d8b28cda8e814e009974663d2e28518e03026438221d05a7feffd1991e80e2b989496bc9ffb91944ba89f6b749913e6c1
SSDEEP
768:coWfTLO3B5YC0YbwuRPv87BZILqSdE8TWz7MUshl0r/g:sfO3orNBZdGSMLUg
latrodectus
https://scifimond.com/live/
https://drifajizo.fun/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
latrodectus.bin |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ