Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

83859acdf4...b2.dll

windows7-x64

10

83859acdf4...b2.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83859acdf4ac22927fa88f715666653807501db6f1865a3657599b4c5d130bb2.exe

  • Size

    2.9MB

  • Sample

    250314-sn34mattbv

  • MD5

    ae544fbeea5fa73ded6f7560afd44790

  • SHA1

    644e5adb482709f313796f3ab16f247f0bce1c9c

  • SHA256

    83859acdf4ac22927fa88f715666653807501db6f1865a3657599b4c5d130bb2

  • SHA512

    ae63e2dbd53c7876aee30012d38e7ea34f8362ef34ef26935b1ca4cad11eda6e9153fda592bfeaaff0019432882ec130f7ecc4c5038beb2ed502fefa14562c2c

  • SSDEEP

    49152:BGIdGbhz/MPFF/6R6MkFjfnm4pzW3GhvRBDsVYArO/0/zoIIdxuS2zPNTQmh5bkp:BlZJqrbzoIIyS5mh5bkOEk1q

Score
10/10
bruteratellatrodectusbackdoorloader

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://horetimodual.com/test/

https://forefilarem.com/test/
aes.hex

Targets

    • Target

      83859acdf4ac22927fa88f715666653807501db6f1865a3657599b4c5d130bb2.exe

    • Size

      2.9MB

    • MD5

      ae544fbeea5fa73ded6f7560afd44790

    • SHA1

      644e5adb482709f313796f3ab16f247f0bce1c9c

    • SHA256

      83859acdf4ac22927fa88f715666653807501db6f1865a3657599b4c5d130bb2

    • SHA512

      ae63e2dbd53c7876aee30012d38e7ea34f8362ef34ef26935b1ca4cad11eda6e9153fda592bfeaaff0019432882ec130f7ecc4c5038beb2ed502fefa14562c2c

    • SSDEEP

      49152:BGIdGbhz/MPFF/6R6MkFjfnm4pzW3GhvRBDsVYArO/0/zoIIdxuS2zPNTQmh5bkp:BlZJqrbzoIIyS5mh5bkOEk1q

    Score
    10/10
    bruteratellatrodectusbackdoorloader

    • Brute Ratel C4

      A customized command and control framework for red teaming and adversary simulation.

      backdoorbruteratel

    • Bruteratel family

      bruteratel

    • Detect BruteRatel badger

    • Detects Latrodectus

      Detects Latrodectus v1.4.

    • Latrodectus family

      latrodectus

    • Latrodectus loader

      Latrodectus is a loader written in C++.

      loaderlatrodectus

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks