Analysis
-
max time kernel
93s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-11-2024 08:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
run.bat
Resource
win10v2004-20241007-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
sample.dll
-
Size
1.6MB
-
MD5
09c971d37b0d9b139b03950914304735
-
SHA1
b4aa149092c41b3f478d0d3984ed1c71f9d5c0cf
-
SHA256
ce9a17687a6aa71b1f382c292a085bd31eb4c15a851cc11e49b1302bd3d1602b
-
SHA512
928c00c0dfe3d14d15e16f1af5e954fe257914d40e453cf8bc32b67dac927877c7bf3c740c1f20dc7584227c41b1bd0ef1e4bafced8bddd445de6c6f68a08d42
-
SSDEEP
24576:OZUojo622mgFSgT95BG1Dod9eIJb6/Y9rQcZ9pIkh4bdY59ed2ABHSm0h:OiW22vFR5s1HIVCY9kQ9SkmbyedjBp0h
Score
10/10
Malware Config
Signatures
-
Detects Latrodectus 1 IoCs
Detects Latrodectus v1.4 Payload.
Processes:
resource yara_rule behavioral2/memory/3760-0-0x000001F3C3630000-0x000001F3C52E3000-memory.dmp Latrodectus14 -
Latrodectus family
-
Latrodectus loader
Latrodectus is a loader written in C++.