Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
615s -
max time network
875s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
18/07/2024, 23:19
Static task
static1
Behavioral task
behavioral1
Sample
Slee.dll
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Slee.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Slee.dll
Resource
win11-20240709-en
General
-
Target
Slee.dll
-
Size
1.4MB
-
MD5
84d0227107b7f347c3197d818360202e
-
SHA1
878bad74db214c0f29e12ee253a484e97f7e6f22
-
SHA256
4e9e8660a3c54e8b24423399707bd01ab714d1db26cc123017b0db450447601d
-
SHA512
4af1a234f87103055a84c4dc013f79daed95038a1ec517ba071e7d053ca7ec22ead51ff88fcaba0fd23774a4f7854d875672d0509489e2ffa9bda0107969a192
-
SSDEEP
24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT
Malware Config
Extracted
latrodectus
https://stripplasst.com/live/
https://coolarition.com/live/
Signatures
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Detect larodectus Loader variant 2 1 IoCs
resource yara_rule behavioral1/memory/3936-0-0x000002FDA9800000-0x000002FDA9814000-memory.dmp family_latrodectus_v2