General

  • Target

    6c317fc0e35b001c9307734fae9ead91_JaffaCakes118

  • Size

    28KB

  • Sample

    240724-t5s6esygpb

  • MD5

    6c317fc0e35b001c9307734fae9ead91

  • SHA1

    a3a280a883973d9c7ec7c93a560418357f961531

  • SHA256

    9d5a9be2b2c34bd282493cd8c448632a4605e260ae3be46cd1a033117a95ece6

  • SHA512

    5a22d853862a0be670741471c2c2a50eaf88cff62f508eb36a4e80864dee5bb5c83c7aa7e18ad7ea0bcf15fb0bfe4c46bb30d0a18c620fd517d73c884d0bfc4f

  • SSDEEP

    192:xSUV345efvX4E19Qhz19qFgcbgwRrLqwEXSKHxEoGDAW7:z3fnl9QR1QTbX6bDClDAW7

Malware Config

Extracted

Family

latentbot

C2

atualizador.zapto.org

Targets

    • Target

      6c317fc0e35b001c9307734fae9ead91_JaffaCakes118

    • Size

      28KB

    • MD5

      6c317fc0e35b001c9307734fae9ead91

    • SHA1

      a3a280a883973d9c7ec7c93a560418357f961531

    • SHA256

      9d5a9be2b2c34bd282493cd8c448632a4605e260ae3be46cd1a033117a95ece6

    • SHA512

      5a22d853862a0be670741471c2c2a50eaf88cff62f508eb36a4e80864dee5bb5c83c7aa7e18ad7ea0bcf15fb0bfe4c46bb30d0a18c620fd517d73c884d0bfc4f

    • SSDEEP

      192:xSUV345efvX4E19Qhz19qFgcbgwRrLqwEXSKHxEoGDAW7:z3fnl9QR1QTbX6bDClDAW7

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Drops startup file

MITRE ATT&CK Enterprise v15

Tasks