Analysis
-
max time kernel
15s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
25-07-2024 21:16
Static task
static1
Behavioral task
behavioral1
Sample
0abcba8eb9c67590464fe34b362047d0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0abcba8eb9c67590464fe34b362047d0N.dll
Resource
win10v2004-20240709-en
General
-
Target
0abcba8eb9c67590464fe34b362047d0N.dll
-
Size
1.4MB
-
MD5
0abcba8eb9c67590464fe34b362047d0
-
SHA1
9f2057fa4e0c7a7809b95395ac5c86602050efc6
-
SHA256
3ff6b4d5943808edbbb0d1f31b6f6b4c39edb34bf3a5c65f075c937a3713000b
-
SHA512
f9ce4017dc84ea327b5a4def99ddfbcce0b6d9a7d02c33db260edd0fb3f5e800ad173e1efe082cc8c571f6d61eb6f3929510d8b769f99f1daab47a0eb2d04466
-
SSDEEP
24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT
Malware Config
Extracted
latrodectus
https://stripplasst.com/live/
https://coolarition.com/live/
Signatures
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Detect larodectus Loader variant 2 1 IoCs
resource yara_rule behavioral1/memory/2532-0-0x0000000000130000-0x0000000000144000-memory.dmp family_latrodectus_v2