Resubmissions

05-09-2024 15:28

240905-swhsnatcrj 10

05-09-2024 15:27

240905-sv9vrathre 10

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05-09-2024 15:28

General

  • Target

    3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567.dll

  • Size

    469KB

  • MD5

    e27c6586dba78d5d302589f3b231be40

  • SHA1

    305031a6d93a744cf61552ab673ddb27843ee845

  • SHA256

    3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567

  • SHA512

    1f0c126e38eed21ee51e04ebe4717fcbb3545d9ccdcc24ba0125f82c5f9b94d1406cbf3ba9f58958e4f180bdd6931bc3a3cb5390de990f8265baabfd414f89c2

  • SSDEEP

    12288:YERU04ML77eb/yVydk3+qloeDFgZkF7o:YEfDLP4qVydk3+qlpDkS

Score
10/10

Malware Config

Extracted

Family

latrodectus

C2

https://scifimond.com/live/

https://drifajizo.fun/live/

Signatures

  • Latrodectus loader

    Latrodectus is a loader written in C++.

  • Detect larodectus Loader variant 2 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567.dll,#1
    1⤵
      PID:3052

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3052-0-0x0000000001D20000-0x0000000001D34000-memory.dmp

      Filesize

      80KB