Overview

overview

10

Static

static

10

764-0-0x00...ry.dll

windows7-x64

1

764-0-0x00...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    764-0-0x0000000180000000-0x0000000181CB2000-memory.dmp

  • Size

    28.7MB

  • MD5

    ee9aaa7862317a617bfb1059347cf685

  • SHA1

    cb3c8adeecca9b1d4e4848e954dc00e5524f6bf9

  • SHA256

    34e96587756a839841975c53fd202a677bc954b8b32b1807a89f22c766d73f93

  • SHA512

    246a37e3fb2e14fd5e28046732b189894828af13ebb987d854a01f2c813a131ce8f349151cf07bb2874b3809076754c172cce9110da3a0b290b845b472648af4

  • SSDEEP

    1536:jzh7eO6hHRCSsVfml1b6z5of8IJCqtWiKI:jzh7WZ4SgfmlWokIJ5IRI

Score
10/10
latrodectus

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://remustarofilac.com/test/

https://horetimodual.com/test/
Attributes
  • group

    Ferrary

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Signatures

  • Latrodectus family
    latrodectus
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 764-0-0x0000000180000000-0x0000000181CB2000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections