General

  • Target

    d64b8980f382caba9eb8fbf58bd7daca_JaffaCakes118

  • Size

    716KB

  • Sample

    240909-pgnhtazclf

  • MD5

    d64b8980f382caba9eb8fbf58bd7daca

  • SHA1

    b516881b4eddbf9a8d635af07792f70a5828ddfc

  • SHA256

    ab040d87cddeec8f2a46b1c075673ce4de279e0e38d7a6d8a8af98b5a9c6d06c

  • SHA512

    55c5fe6e01e5a1ebccd347f278f332f5b3af1c6f72215c3f60d0e72c03e43508779af3548b41dfaa8b4db80e289217937482b73cff1a9b1b473c6a290f909ae3

  • SSDEEP

    6144:dlvQTtKTtFN/Njtwmfme8R3lgyBgW0rJw7SDmAlN0TtU:7vaWN1jtlOSyB2JgA/Oe

Malware Config

Extracted

Family

latentbot

C2

atualizador.zapto.org

Targets

    • Target

      d64b8980f382caba9eb8fbf58bd7daca_JaffaCakes118

    • Size

      716KB

    • MD5

      d64b8980f382caba9eb8fbf58bd7daca

    • SHA1

      b516881b4eddbf9a8d635af07792f70a5828ddfc

    • SHA256

      ab040d87cddeec8f2a46b1c075673ce4de279e0e38d7a6d8a8af98b5a9c6d06c

    • SHA512

      55c5fe6e01e5a1ebccd347f278f332f5b3af1c6f72215c3f60d0e72c03e43508779af3548b41dfaa8b4db80e289217937482b73cff1a9b1b473c6a290f909ae3

    • SSDEEP

      6144:dlvQTtKTtFN/Njtwmfme8R3lgyBgW0rJw7SDmAlN0TtU:7vaWN1jtlOSyB2JgA/Oe

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Drops startup file

MITRE ATT&CK Enterprise v15

Tasks