Overview

overview

10

Static

static

3

D3D10Ref.dll

windows10-2004-x64

10

D3D10Ref.dll

windows11-21h2-x64

10

Analysis

  • max time kernel
    105s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/03/2025, 14:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    D3D10Ref.dll

  • Size

    2.7MB

  • MD5

    237cb53e11bfeffe4cbca7db47be12f0

  • SHA1

    523631dd20ee0eac9cc64c9feb54d91251d68e03

  • SHA256

    21479f35e8a3717a5b27202497a2d6e2c8cbf4735c3fef0f3e729b430a375e20

  • SHA512

    e78b30d4f9cb2268f53fdbefbea352f785eb78ef0f05e2abd37319ae0966440c69c00718461409d2046d63c05fbaae24e84f9b019466c216a9f72ed5aef84ce5

  • SSDEEP

    49152:5sYeNTrG1MxkJYEo2dc9cDeBGGJGpD/dv0sQy5XZZpATe0cWS6Uu6iClbGaPT:55R4GUouC0cPFu8FG

Score
10/10
latrodectusloader

Malware Config

Extracted

Family

latrodectus

Version

1.4

C2

https://forefilarem.com/test/

https://xiolewarentiom.com/test/
aes.hex

Signatures

  • Detects Latrodectus 1 IoCs

    Detects Latrodectus v1.4.

  • Latrodectus family
    latrodectus
  • Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\D3D10Ref.dll,#1
    1⤵
      PID:5080

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5080-0-0x00007FFF4AFFF000-0x00007FFF4B000000-memory.dmp

      Filesize

      4KB

      Download

    • memory/5080-1-0x0000022B1D390000-0x0000022B1D3A5000-memory.dmp

      Filesize

      84KB

      Download

    • memory/5080-4-0x00007FFF4AD70000-0x00007FFF4B040000-memory.dmp

      Filesize

      2.8MB

      Download

    • memory/5080-5-0x00007FFF4AFFF000-0x00007FFF4B000000-memory.dmp

      Filesize

      4KB

      Download

    • memory/5080-6-0x00007FFF4AD70000-0x00007FFF4B040000-memory.dmp

      Filesize

      2.8MB

      Download