Analysis
-
max time kernel
143s -
max time network
205s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13-08-2024 12:28
Static task
static1
Behavioral task
behavioral1
Sample
23546ec67474ed6788a14c9410f3fc458b5c5ff8bd13885100fb4f3e930a30bf.bin.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
23546ec67474ed6788a14c9410f3fc458b5c5ff8bd13885100fb4f3e930a30bf.bin.dll
Resource
win10v2004-20240802-en
General
-
Target
23546ec67474ed6788a14c9410f3fc458b5c5ff8bd13885100fb4f3e930a30bf.bin.dll
-
Size
1.4MB
-
MD5
04e7f788a2dd9cd92bb9b429eeda1aed
-
SHA1
b1df05a4fb9f1aa3d43a64b957a6d8eef42d6c69
-
SHA256
23546ec67474ed6788a14c9410f3fc458b5c5ff8bd13885100fb4f3e930a30bf
-
SHA512
773bce7a49a2ba45ddcd80c77b1f1561b3ea3161317f1ed664c406bf4b7c821ba4d4664ddea37423d192fa4021fd861459654d940bb02b2272bed5f8bbbd65cc
-
SSDEEP
24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT
Malware Config
Extracted
latrodectus
https://stripplasst.com/live/
https://coolarition.com/live/
Signatures
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Detect larodectus Loader variant 2 1 IoCs
resource yara_rule behavioral2/memory/4392-0-0x00000241C9290000-0x00000241C92A4000-memory.dmp family_latrodectus_v2