Overview

overview

10

Static

static

ZjNTDKHui.exe

windows7_x64

10

ZjNTDKHui.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ZjNTDKHui.zip
  • Size 8.7MB
  • Sample220526-wkhkashfbp
  • SHA256 030d47b575c72785d7d8cd299dba5fe75353a0b095d44926c5a074e77bdf2780
  • MD5 SHA1 SHA512
Score
10/10
latentbotpersistencetrojan

Malware Config

Targets

    • Target
      ZjNTDKHui.png
    • Size 363.8MB
    • SHA256 12f1ff753b00f6b3525e0ecfe97ee0771ebab3624689771f567f690ca7cde689
    • MD5 SHA1 SHA512
    Score
    10/10
    latentbotpersistencetrojan

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

      trojanlatentbot

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks