Analysis

  • max time kernel
    143s
  • max time network
    205s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-08-2024 12:28

General

  • Target

    23546ec67474ed6788a14c9410f3fc458b5c5ff8bd13885100fb4f3e930a30bf.bin.dll

  • Size

    1.4MB

  • MD5

    04e7f788a2dd9cd92bb9b429eeda1aed

  • SHA1

    b1df05a4fb9f1aa3d43a64b957a6d8eef42d6c69

  • SHA256

    23546ec67474ed6788a14c9410f3fc458b5c5ff8bd13885100fb4f3e930a30bf

  • SHA512

    773bce7a49a2ba45ddcd80c77b1f1561b3ea3161317f1ed664c406bf4b7c821ba4d4664ddea37423d192fa4021fd861459654d940bb02b2272bed5f8bbbd65cc

  • SSDEEP

    24576:2jlHId6yXTa8ywj/U1FElyUXpk6ztqTSnMW:2jl7n8XaK5STSnT

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://stripplasst.com/live/

https://coolarition.com/live/

Signatures

  • Latrodectus loader

    Latrodectus is a loader written in C++.

  • Detect larodectus Loader variant 2 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\23546ec67474ed6788a14c9410f3fc458b5c5ff8bd13885100fb4f3e930a30bf.bin.dll,#1
    1⤵
      PID:4392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4392-0-0x00000241C9290000-0x00000241C92A4000-memory.dmp

      Filesize

      80KB