Overview

overview

10

Static

static

10

2636-0-0x0...ry.dll

windows7-x64

1

2636-0-0x0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2636-0-0x0000000180000000-0x0000000181CB2000-memory.dmp

  • Size

    28.7MB

  • MD5

    0afb7d93b7b5a8be76acaad51beac3dd

  • SHA1

    eaa0e01f7e3b4deb0c6f6b0ed41b647ff5684f52

  • SHA256

    3cb9621193cb3fa4c9b4cf44dd641dfc6f67782927411bdb9cf6a329ffa9ffe4

  • SHA512

    31cab17919cc3b83613e6b6462600ecaa6310bc39177d402b4282b853db0949dc4ee4ddaebbb4337d4a43322b58c9b5a6b127532eb650f3de9997c21419f6a31

  • SSDEEP

    1536:jzh7eO6hHRCSsVfml1b6z5of8IiCqtWiKI:jzh7WZ4SgfmlWokIi5IRI

Score
10/10
latrodectus

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://remustarofilac.com/test/

https://horetimodual.com/test/
Attributes
  • group

    Ferrary

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

aes.hex

Signatures

  • Latrodectus family
    latrodectus
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2636-0-0x0000000180000000-0x0000000181CB2000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections