Analysis

  • max time kernel
    541s
  • max time network
    1145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-07-2024 23:19

General

  • Target

    Slee.dll

  • Size

    1.4MB

  • MD5

    84d0227107b7f347c3197d818360202e

  • SHA1

    878bad74db214c0f29e12ee253a484e97f7e6f22

  • SHA256

    4e9e8660a3c54e8b24423399707bd01ab714d1db26cc123017b0db450447601d

  • SHA512

    4af1a234f87103055a84c4dc013f79daed95038a1ec517ba071e7d053ca7ec22ead51ff88fcaba0fd23774a4f7854d875672d0509489e2ffa9bda0107969a192

  • SSDEEP

    24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://stripplasst.com/live/

https://coolarition.com/live/

Signatures

  • Latrodectus loader

    Latrodectus is a loader written in C++.

  • Detect larodectus Loader variant 2 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Slee.dll,#1
    1⤵
      PID:2068

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2068-0-0x0000028C61A60000-0x0000028C61A74000-memory.dmp

      Filesize

      80KB