Extracted

• • Target

    e3ccd215b8c47ed2bf7f8e33aff79f30_JaffaCakes118

  • Size

    712KB

  • MD5

    e3ccd215b8c47ed2bf7f8e33aff79f30

  • SHA1

    f0e45d3d4b72c810b9b80644209f39478c75bf19

  • SHA256

    44f2bb30565f32bccf340910531f357647b2644477a15b3022d83ebee9b4334c

  • SHA512

    61d9ebe8886f4f4e203c1f3bd300fdfdc0c6ec53b210cfe0faef6df2fca50b4006a35063bff00d9422686ce786f307654fc30499cb9c9d0838c8bad77d333ff4

  • SSDEEP

    12288:gx5O5TTfgajhNxVejs9wmQ8XK6mYnjBidC1YmktBb1YmktB/:gx5GfgKxVeIpmYnjBiLtBWtB/

  Score

  10^/10

  latentbotdiscoveryevasionpersistencetrojan

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Modifies firewall policy service

    evasion

  • Adds policy Run key to start application

    persistence

  • Adds Run key to start application

    persistence
  behavioral1behavioral2