extra
follower
run
scub
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
latrodectus_1.2.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
latrodectus_1.2.dll
Resource
win10v2004-20240709-en
Target
latrodectus_1.2.bin
Size
61KB
MD5
58baec37e77f6f7f4339b4557ce9cc57
SHA1
993cf0a9b1472f480d3fa854ce5dbb0fb34c0f05
SHA256
45e327e1fb60a272a3e7aa256c29f1d55846d90733329e7d453f6a1061916775
SHA512
01ec5aa867ac1075effde830c7b6e0d8e84988053009e4942afc6480b29459e508209a45bf704959fb51251bd0af8550f644fc716edabc8bff76d2a0de8197ce
SSDEEP
768:+i0IIO99dKJKbAgQVuyQw4n4mjlQmLvniWiMfDeDvhHImz:ipO9CJKrQF4n4mjltqTMKD5H
latrodectus
https://titnovacrion.top/live/
https://skinnyjeanso.com/live/
resource | yara_rule |
---|---|
sample | family_latrodectus_v2 |
Checks for missing Authenticode signature.
resource |
---|
latrodectus_1.2.bin |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ