Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    615s
  • max time network
    875s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    18/07/2024, 23:19

General

  • Target

    Slee.dll

  • Size

    1.4MB

  • MD5

    84d0227107b7f347c3197d818360202e

  • SHA1

    878bad74db214c0f29e12ee253a484e97f7e6f22

  • SHA256

    4e9e8660a3c54e8b24423399707bd01ab714d1db26cc123017b0db450447601d

  • SHA512

    4af1a234f87103055a84c4dc013f79daed95038a1ec517ba071e7d053ca7ec22ead51ff88fcaba0fd23774a4f7854d875672d0509489e2ffa9bda0107969a192

  • SSDEEP

    24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://stripplasst.com/live/

https://coolarition.com/live/

Signatures

  • Latrodectus loader

    Latrodectus is a loader written in C++.

  • Detect larodectus Loader variant 2 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Slee.dll,#1
    1⤵
      PID:3936

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3936-0-0x000002FDA9800000-0x000002FDA9814000-memory.dmp

      Filesize

      80KB