latentbot

General

Target
ID_ArchivoReporteSELIPKSSGFsuyukGAYEN.zip
Size 2.9MB
Sample221114-xp3ayada77
SHA256 ccd4df41336fb504be4da635046fab651ed3bdd1485a59857b88196860110f58
MD5 e3227055a48cacd10d1595c989ebde9c
SHA1 4cbdaa7f0b773e3a6a8decb58484cd49a42e3659
SHA512 ba2ea6ab4f788feb41173f579b55787d2f2dd025d14c62d755bc4334ee772e74dccda20ce06e8b306cfe9f64cd5f349890c4112eef5bef69f4447bb0952c4ef6
SSDEEP 49152:CYb4AYJvYaKGK4bmFgsV83BZuXgsC75q/UjcoP0tBIei8iX2:CYbDaP5KosVN8QoP0tBIefiX2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  ReporteTPMNZGZSFQiszufTHFMK.exe
- Size 322.4MB
- SHA256 6c25a2afdb549fc98f52fd1b091d5ff28bdc609dcbe9fb41e0603ee02869d659
- MD5 743feb63ff45e8d2718f93c0bba53462
- SHA1 0ecdab9c49d76a1cb0399f957b29ba53ee16b9e0
- SHA512 0d2bb03b1320767417687c0cb6fe1ce9810f965b4793816b14e3a69354de4364081cb0dfc517f6bd384469267ba4cb7e504556e41492c7355e8bd7191141d5ce
- SSDEEP 49152:TWjez9bl8O7pSTQVoofmn5zMvbg+/adL1OeJTeoHz9wa+T/oUrB8GNEXmT1iXfUF:TWExgKfm9M8+/ad5wja+T5H+lv/eH
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

latentbot persistence trojan
- LatentBot
  Modular trojan written in Delphi which has been in-the-wild since 2013.
  trojan latentbot
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~77270.xml
- Size 12KB
- SHA256 be9f858306daf9c886fbe579db2f788a21a5531c7d0028b6d663fac43ffaeb0c
- MD5 20993d0e3f4ce09f39cd119624f3541d
- SHA1 e1ad60184a03f48217ab48742b1e2e141272d829
- SHA512 1997c07f0cec3df29a849c1a950ffe80b9c3259d73a43b8a90cc99341fbdfb123f7d6825a5ed1020607261aa5ddd8c089ec3a2ba4bed8c4904fb8e95d445dd33
- SSDEEP 192:PZWVghWcRIYiYF8r7S4maIYiYF8r7SvOjuFW:RW2hWoIYiE4maIYiE22W
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4