Analysis
-
max time kernel
541s -
max time network
1145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
18-07-2024 23:19
Static task
static1
Behavioral task
behavioral1
Sample
Slee.dll
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Slee.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Slee.dll
Resource
win11-20240709-en
General
-
Target
Slee.dll
-
Size
1.4MB
-
MD5
84d0227107b7f347c3197d818360202e
-
SHA1
878bad74db214c0f29e12ee253a484e97f7e6f22
-
SHA256
4e9e8660a3c54e8b24423399707bd01ab714d1db26cc123017b0db450447601d
-
SHA512
4af1a234f87103055a84c4dc013f79daed95038a1ec517ba071e7d053ca7ec22ead51ff88fcaba0fd23774a4f7854d875672d0509489e2ffa9bda0107969a192
-
SSDEEP
24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT
Malware Config
Extracted
latrodectus
https://stripplasst.com/live/
https://coolarition.com/live/
Signatures
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Detect larodectus Loader variant 2 1 IoCs
resource yara_rule behavioral2/memory/2068-0-0x0000028C61A60000-0x0000028C61A74000-memory.dmp family_latrodectus_v2