Extracted

• • Target

    78b4f8fee155af57c3353652508026a645ee4e2fd98173f5509507be120c58f9

  • Size

    182KB

  • MD5

    aca0516142f102aba41e046a340f24e9

  • SHA1

    e536f4c9ef2de3ad29377b635f2fb4e0c9732ae2

  • SHA256

    78b4f8fee155af57c3353652508026a645ee4e2fd98173f5509507be120c58f9

  • SHA512

    d0823a873fdad0375ead508d7f3d543ebe9767bc8e901f530b7c2e5172ba83232fa3876cd3da02cf21f0c3e0437409ff7aaada49f30ba0a495e7d527b8487cc7

  • SSDEEP

    3072:VGa1p9iTOvYDdofYRxYv0sSpMU4HB5//bLXMPBeqUSBxOklE1xHpciC2RIvA2w6P:Vj9UOv1Sh4HP3PcPwYHOnFBC2RIvA2wI

  Score

  10^/10

  latentbotpersistencetrojan

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Drops startup file

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2