Extracted

• • Target

    4031832fa9d533dfe61b5e00dbc383f7_JaffaCakes118

  • Size

    43KB

  • MD5

    4031832fa9d533dfe61b5e00dbc383f7

  • SHA1

    b381840d18a2655f335001f6273ebd98d22b1af3

  • SHA256

    3a24e8cbb7e639aafe5f5753db4e9547ff4dd42b34d692fd4d498319c36c97ec

  • SHA512

    c571eb511c8951690ae309ac8c3c49eafcd7d1ee02a5249e3b34c5937bb1a1ffd7eeac56dae2230cd48d17255095cb82a13159efe151275109b6fb169df8a3a0

  • SSDEEP

    768:RBn4ol613kXyc3hpRgoGRit9BDBS2B1PgKP7i/hrOwpFeolk8y:RTXy0RgmE23P9PG/TpQoaF

  Score

  10^/10

  latentbotpersistencetrojan

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2