Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
07-08-2024 01:09
Static task
static1
Behavioral task
behavioral1
Sample
3c277d6c04c3ba184b5608b5a8e295f0N.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3c277d6c04c3ba184b5608b5a8e295f0N.dll
Resource
win10v2004-20240802-en
General
-
Target
3c277d6c04c3ba184b5608b5a8e295f0N.dll
-
Size
1.4MB
-
MD5
3c277d6c04c3ba184b5608b5a8e295f0
-
SHA1
134b7716f681622b7b215bfbb805bff8c43ae504
-
SHA256
d1413e610fc533470512f5584acafbed3414ef4339d75c59eab243962f48dbb8
-
SHA512
d0beac6790343ecb76c202bfc04fbd7888d3a51b892fd1c9a07729b68c59344741624cc5ec067c0fc9836f0ca99062bd3559bc9e270707b8d1b6dac7e008d366
-
SSDEEP
24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT
Malware Config
Extracted
latrodectus
https://stripplasst.com/live/
https://coolarition.com/live/
Signatures
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Detect larodectus Loader variant 2 1 IoCs
resource yara_rule behavioral1/memory/2528-0-0x0000000000130000-0x0000000000144000-memory.dmp family_latrodectus_v2