Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07-08-2024 01:09
Static task
static1
Behavioral task
behavioral1
Sample
3c277d6c04c3ba184b5608b5a8e295f0N.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3c277d6c04c3ba184b5608b5a8e295f0N.dll
Resource
win10v2004-20240802-en
General
-
Target
3c277d6c04c3ba184b5608b5a8e295f0N.dll
-
Size
1.4MB
-
MD5
3c277d6c04c3ba184b5608b5a8e295f0
-
SHA1
134b7716f681622b7b215bfbb805bff8c43ae504
-
SHA256
d1413e610fc533470512f5584acafbed3414ef4339d75c59eab243962f48dbb8
-
SHA512
d0beac6790343ecb76c202bfc04fbd7888d3a51b892fd1c9a07729b68c59344741624cc5ec067c0fc9836f0ca99062bd3559bc9e270707b8d1b6dac7e008d366
-
SSDEEP
24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT
Malware Config
Extracted
latrodectus
https://stripplasst.com/live/
https://coolarition.com/live/
Signatures
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Detect larodectus Loader variant 2 1 IoCs
resource yara_rule behavioral2/memory/4508-0-0x000001D73C0E0000-0x000001D73C0F4000-memory.dmp family_latrodectus_v2