General

  • Target

    e79d301be6f30a698fdc2c122ee97c05_JaffaCakes118

  • Size

    2.4MB

  • Sample

    240917-yw1lcssdqa

  • MD5

    e79d301be6f30a698fdc2c122ee97c05

  • SHA1

    584d79744e07657e1d211973c30247fee37d60d0

  • SHA256

    f248f53e4c9e2d0d1666734da19e542b5ce0b523760fa7488cbf89ab4df45b36

  • SHA512

    b4fa25c8a7733f970fc60c050a50481d77f087ac0fa4242f53059215955b8e04d200fb8a445b4b6c126450832ba4e1b1f06c66eb0c371111277b7c4379a88c87

  • SSDEEP

    24576:57j1mpKlFqDgxRJeW9pcu+BkSHD1wejQMUXWNca7E0JuPf0DGlmil9NCHdrc01UR:5DlFJHgmSxwzCca7UPcDOz8drnP

Malware Config

Extracted

Family

latentbot

C2

costarncosta.zapto.org

Targets

    • Target

      e79d301be6f30a698fdc2c122ee97c05_JaffaCakes118

    • Size

      2.4MB

    • MD5

      e79d301be6f30a698fdc2c122ee97c05

    • SHA1

      584d79744e07657e1d211973c30247fee37d60d0

    • SHA256

      f248f53e4c9e2d0d1666734da19e542b5ce0b523760fa7488cbf89ab4df45b36

    • SHA512

      b4fa25c8a7733f970fc60c050a50481d77f087ac0fa4242f53059215955b8e04d200fb8a445b4b6c126450832ba4e1b1f06c66eb0c371111277b7c4379a88c87

    • SSDEEP

      24576:57j1mpKlFqDgxRJeW9pcu+BkSHD1wejQMUXWNca7E0JuPf0DGlmil9NCHdrc01UR:5DlFJHgmSxwzCca7UPcDOz8drnP

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks