latrodectus | 762d06bfa27f703890e9eda2ba03189518c87c85826621126545cf4c78f4194c

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
07-02-2025 05:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

762d06bfa27f703890e9eda2ba03189518c87c85826621126545cf4c78f4194c.dll
Size

2.2MB
MD5

524a8891a7df50aa9ced2da9ef379929
SHA1

b1acfa003a045e5839dea1aecbcd5f601ff3af99
SHA256

762d06bfa27f703890e9eda2ba03189518c87c85826621126545cf4c78f4194c
SHA512

f3d051ba7142f0a504e998cbb7b64a6fd90ae9053cd275c18d7233688cc71d633a38d720b75bbf44b4db2b4f6c4b84f5a829fc18d5a4ec88cfc1633e3f184242
SSDEEP

49152:/ZzQqIEjvDQPOnR5mSBn/VSlsBzXHWtSyZS:/YcxyZ

Score

10^/10

latrodectus loader

Malware Config

Extracted

Family

latrodectus

Version

1.4

https://apworsindos.com/test/

https://reminasolirol.com/test/

Attributes

group
Mimikast
user_agent
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Extracted

Family

latrodectus

aes.hex

Signatures

Latrodectus family
latrodectus
Latrodectus loader
Latrodectus is a loader written in C++.
loader latrodectus

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2624 wrote to memory of 1740	2624	rundll32.exe	30
PID 2624 wrote to memory of 1740	2624	rundll32.exe	30
PID 2624 wrote to memory of 1740	2624	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\762d06bfa27f703890e9eda2ba03189518c87c85826621126545cf4c78f4194c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2624
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2624 -s 128
  2⤵
  PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2624-2-0x0000000180000000-0x0000000181CB2000-memory.dmp

Filesize
28.7MB

Download
memory/2624-4-0x0000000001D70000-0x0000000003A21000-memory.dmp

Filesize
28.7MB

Download

Analysis

Sharing

General

Malware Config

Extracted

Extracted

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads