Analysis
-
max time kernel
1354s -
max time network
1326s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
26/03/2025, 14:55
General
-
Target
D3D10Ref.dll
-
Size
2.7MB
-
MD5
237cb53e11bfeffe4cbca7db47be12f0
-
SHA1
523631dd20ee0eac9cc64c9feb54d91251d68e03
-
SHA256
21479f35e8a3717a5b27202497a2d6e2c8cbf4735c3fef0f3e729b430a375e20
-
SHA512
e78b30d4f9cb2268f53fdbefbea352f785eb78ef0f05e2abd37319ae0966440c69c00718461409d2046d63c05fbaae24e84f9b019466c216a9f72ed5aef84ce5
-
SSDEEP
49152:5sYeNTrG1MxkJYEo2dc9cDeBGGJGpD/dv0sQy5XZZpATe0cWS6Uu6iClbGaPT:55R4GUouC0cPFu8FG
Score
10/10
Malware Config
Extracted
Family
latrodectus
Version
1.4
C2
https://forefilarem.com/test/
https://xiolewarentiom.com/test/
aes.hex
Signatures
-
Detects Latrodectus 1 IoCs
Detects Latrodectus v1.4.
-
Latrodectus family
-
Latrodectus loader
Latrodectus is a loader written in C++.
-
Blocklisted process makes network request 6 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\D3D10Ref.dll,#11⤵
- Blocklisted process makes network request
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
84KB
-
Filesize
2.8MB
-
Filesize
4KB
-
Filesize
2.8MB