Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0abcba8eb9...0N.dll

windows7-x64

10

0abcba8eb9...0N.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    100s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/07/2024, 21:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0abcba8eb9c67590464fe34b362047d0N.dll

  • Size

    1.4MB

  • MD5

    0abcba8eb9c67590464fe34b362047d0

  • SHA1

    9f2057fa4e0c7a7809b95395ac5c86602050efc6

  • SHA256

    3ff6b4d5943808edbbb0d1f31b6f6b4c39edb34bf3a5c65f075c937a3713000b

  • SHA512

    f9ce4017dc84ea327b5a4def99ddfbcce0b6d9a7d02c33db260edd0fb3f5e800ad173e1efe082cc8c571f6d61eb6f3929510d8b769f99f1daab47a0eb2d04466

  • SSDEEP

    24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

C2

https://stripplasst.com/live/

https://coolarition.com/live/

Signatures

  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus
  • Detect larodectus Loader variant 2 1 IoCs
    loader

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0abcba8eb9c67590464fe34b362047d0N.dll,#1
    1⤵
      PID:3500

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3500-0-0x0000029D203C0000-0x0000029D203D4000-memory.dmp

      Filesize

      80KB

      Download