Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
30-07-2024 23:56
Static task
static1
Behavioral task
behavioral1
Sample
316c2f5d6b138552e38a2679cc576a00N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
316c2f5d6b138552e38a2679cc576a00N.dll
Resource
win10v2004-20240730-en
General
-
Target
316c2f5d6b138552e38a2679cc576a00N.dll
-
Size
1.4MB
-
MD5
316c2f5d6b138552e38a2679cc576a00
-
SHA1
4cf8d375967cc88406dd6b66ad45202c1aa30bac
-
SHA256
f7224920a223b8f5d23438200e7807ec739ce7bc0555bea097d4679d2ab6ee2b
-
SHA512
5b40285e34c70bf85e0db13b53d984fde6bb38661c3f40d193a6933906a0b87d3d0a9f282b5bba9726370f23c4300e320cb6c5c9066d57a0ba9e35384284a4a6
-
SSDEEP
24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT
Malware Config
Extracted
latrodectus
https://stripplasst.com/live/
https://coolarition.com/live/
Signatures
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Detect larodectus Loader variant 2 1 IoCs
resource yara_rule behavioral1/memory/2180-0-0x0000000000120000-0x0000000000134000-memory.dmp family_latrodectus_v2