Analysis
-
max time kernel
141s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
06-02-2025 18:50
Static task
static1
Behavioral task
behavioral1
Sample
fxghx12.dll
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
fxghx12.dll
Resource
win10v2004-20250129-en
General
-
Target
fxghx12.dll
-
Size
2.2MB
-
MD5
93189cbce2906d18ffd4e9cb2a829315
-
SHA1
f9ea3577aff1ab0f03eae60edb678dc43d3fe70d
-
SHA256
bdca22607853800b711335b8d5e50e21e1e4859f7db7382b512dd1330274f90d
-
SHA512
1f982538ea45383097f7924f61144f6d959a07d2df6eaca2683832f238bd6603bfa3879695da489782d81a9a2d57a8dbf5635fed2c48eecdff459e6fcf0a3a6e
-
SSDEEP
49152:/ZzQqIEjvDQPOnR5mSBn/VSlsBzXHWtSyZS:/YcxyZ
Malware Config
Extracted
latrodectus
1.4
https://apworsindos.com/test/
https://reminasolirol.com/test/
-
group
Mimikast
-
user_agent
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)
Extracted
latrodectus
Signatures
-
Latrodectus family
-
Latrodectus loader
Latrodectus is a loader written in C++.