General
-
Target
rozelin.dll
-
Size
1.5MB
-
Sample
240917-2vgzeaygnf
-
MD5
f9bb8819674b780198ec05761a3ed0d6
-
SHA1
4c61542d76a0107eb80a950c33cd9bd5029a9b32
-
SHA256
3af3c1b6c72f09371c9975eb0914c5b187ba363c0cddf8164d14a0b7c1fcb5dc
-
SHA512
7b636446567b453c37a28b904d9f716a2aaff54676270760702995efdb521a10ae5f1a9254529eadc092b678a3b99e59efaec444f7f923d8e213298ae48f4fdc
-
SSDEEP
24576:aoAIjF2weVvd7+StIkabYLhRCuNHd56L4ZzFYMczX5UHuMH:cIjQwYvd7+StIkss/CY304NFYMypUH
Static task
static1
Behavioral task
behavioral1
Sample
rozelin.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
rozelin.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
rozelin.dll
Resource
win10v2004-20240802-en
Malware Config
Extracted
latrodectus
https://isomicrotich.com/test/
https://rilomenifis.com/test/
Targets
-
-
Target
rozelin.dll
-
Size
1.5MB
-
MD5
f9bb8819674b780198ec05761a3ed0d6
-
SHA1
4c61542d76a0107eb80a950c33cd9bd5029a9b32
-
SHA256
3af3c1b6c72f09371c9975eb0914c5b187ba363c0cddf8164d14a0b7c1fcb5dc
-
SHA512
7b636446567b453c37a28b904d9f716a2aaff54676270760702995efdb521a10ae5f1a9254529eadc092b678a3b99e59efaec444f7f923d8e213298ae48f4fdc
-
SSDEEP
24576:aoAIjF2weVvd7+StIkabYLhRCuNHd56L4ZzFYMczX5UHuMH:cIjQwYvd7+StIkss/CY304NFYMypUH
Score10/10-
Detects Latrodectus
Detects Latrodectus v1.4.
-
Latrodectus family
-
Deletes itself
-
Loads dropped DLL
-