Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
05-09-2024 15:28
Static task
static1
Behavioral task
behavioral1
Sample
3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567.dll
Resource
win10v2004-20240802-en
General
-
Target
3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567.dll
-
Size
469KB
-
MD5
e27c6586dba78d5d302589f3b231be40
-
SHA1
305031a6d93a744cf61552ab673ddb27843ee845
-
SHA256
3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567
-
SHA512
1f0c126e38eed21ee51e04ebe4717fcbb3545d9ccdcc24ba0125f82c5f9b94d1406cbf3ba9f58958e4f180bdd6931bc3a3cb5390de990f8265baabfd414f89c2
-
SSDEEP
12288:YERU04ML77eb/yVydk3+qloeDFgZkF7o:YEfDLP4qVydk3+qlpDkS
Malware Config
Extracted
latrodectus
https://scifimond.com/live/
https://drifajizo.fun/live/
Signatures
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Detect larodectus Loader variant 2 1 IoCs
resource yara_rule behavioral1/memory/3052-0-0x0000000001D20000-0x0000000001D34000-memory.dmp family_latrodectus_v2