Analysis

  • max time kernel
    13s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    24-07-2024 21:01

General

  • Target

    0abcba8eb9c67590464fe34b362047d0N.dll

  • Size

    1.4MB

  • MD5

    0abcba8eb9c67590464fe34b362047d0

  • SHA1

    9f2057fa4e0c7a7809b95395ac5c86602050efc6

  • SHA256

    3ff6b4d5943808edbbb0d1f31b6f6b4c39edb34bf3a5c65f075c937a3713000b

  • SHA512

    f9ce4017dc84ea327b5a4def99ddfbcce0b6d9a7d02c33db260edd0fb3f5e800ad173e1efe082cc8c571f6d61eb6f3929510d8b769f99f1daab47a0eb2d04466

  • SSDEEP

    24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://stripplasst.com/live/

https://coolarition.com/live/

Signatures

  • Latrodectus loader

    Latrodectus is a loader written in C++.

  • Detect larodectus Loader variant 2 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0abcba8eb9c67590464fe34b362047d0N.dll,#1
    1⤵
      PID:2988

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2988-0-0x0000000001D00000-0x0000000001D14000-memory.dmp

      Filesize

      80KB