General

  • Target

    93e8c08c54bd81dc546f553998a990b0_JaffaCakes118

  • Size

    32KB

  • Sample

    240813-t9darszbql

  • MD5

    93e8c08c54bd81dc546f553998a990b0

  • SHA1

    5d24e7c194aaab5127ef3d2fb250bc55aff1e6c8

  • SHA256

    28e9fc24fa17332fc5489ce481d3d8be258893dccc895b17c68b1b7932d2f028

  • SHA512

    f4acaab29425dac41a7855f96efc345630cad35d58ea0e032ef12c3c66c797c52c2d58ee8f271a8cd8b57f21d35dc9f57788291c83afe10cc41153f03bc9968d

  • SSDEEP

    192:PmSEVT93jXKMVQBL6+yzDD06f9DCz1tqVKSFLD8LeuEXKFLslgDACJEn93jXW:KH3OsCy9tQ1g3FvLVMY6DAC293

Malware Config

Extracted

Family

latentbot

C2

atualizador.zapto.org

Targets

    • Target

      93e8c08c54bd81dc546f553998a990b0_JaffaCakes118

    • Size

      32KB

    • MD5

      93e8c08c54bd81dc546f553998a990b0

    • SHA1

      5d24e7c194aaab5127ef3d2fb250bc55aff1e6c8

    • SHA256

      28e9fc24fa17332fc5489ce481d3d8be258893dccc895b17c68b1b7932d2f028

    • SHA512

      f4acaab29425dac41a7855f96efc345630cad35d58ea0e032ef12c3c66c797c52c2d58ee8f271a8cd8b57f21d35dc9f57788291c83afe10cc41153f03bc9968d

    • SSDEEP

      192:PmSEVT93jXKMVQBL6+yzDD06f9DCz1tqVKSFLD8LeuEXKFLslgDACJEn93jXW:KH3OsCy9tQ1g3FvLVMY6DAC293

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Drops startup file

MITRE ATT&CK Enterprise v15

Tasks