General

  • Target

    58dbcf248fa9a4af5d313cd4ef8e3ad6_JaffaCakes118

  • Size

    258KB

  • Sample

    240718-yr68catepn

  • MD5

    58dbcf248fa9a4af5d313cd4ef8e3ad6

  • SHA1

    6901a4ad179b518ad698a4472256d1783030a022

  • SHA256

    13696fe74cc11c0f4956dd7b9b7bf1f1472d4a99db50709f995bfbd661c4f985

  • SHA512

    713bd7c925d96bc11f5669bcfe77ab5b221a7d412c69a7a023e2ae8add55307551495e584b9d54c87c41323993b9b0ef4fc3d74d8a2701596c6f8013b87495aa

  • SSDEEP

    3072:5G5rMlaTgOidzLWvI+Mgrq4NebArAntnU9cIw+cMYm0bPw0ctcYYYYYYYYYYYYYc:5GySidW9qaCArAtU9sMAPwJ

Malware Config

Extracted

Family

latentbot

C2

lorelyfaggot.zapto.org

Targets

    • Target

      58dbcf248fa9a4af5d313cd4ef8e3ad6_JaffaCakes118

    • Size

      258KB

    • MD5

      58dbcf248fa9a4af5d313cd4ef8e3ad6

    • SHA1

      6901a4ad179b518ad698a4472256d1783030a022

    • SHA256

      13696fe74cc11c0f4956dd7b9b7bf1f1472d4a99db50709f995bfbd661c4f985

    • SHA512

      713bd7c925d96bc11f5669bcfe77ab5b221a7d412c69a7a023e2ae8add55307551495e584b9d54c87c41323993b9b0ef4fc3d74d8a2701596c6f8013b87495aa

    • SSDEEP

      3072:5G5rMlaTgOidzLWvI+Mgrq4NebArAntnU9cIw+cMYm0bPw0ctcYYYYYYYYYYYYYc:5GySidW9qaCArAtU9sMAPwJ

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks