Extracted

• • Target

    1582f219876002027f1c0c634bcf24c8_JaffaCakes118

  • Size

    261KB

  • MD5

    1582f219876002027f1c0c634bcf24c8

  • SHA1

    08a72650cc8ed5b62c65272cb0a09871d889b6dc

  • SHA256

    2550ac20ad31cba4657b5b029abe2419db6e49f71b27af9bdcc290d72efae5fe

  • SHA512

    e2345d2d343dac3d36f2fc7bac6a37856be41bfbbc67ca86b4bc980f1c8dbab05b4a9a473af644841a8e7fde89a090a6f14104db2a25401173b39f97173fa4cc

  • SSDEEP

    3072:hMg9fLc0qsPcY3Dv9oxtFel3boQtSU9R/yllI5ZUyNLiKGNq09O5jZVfYVTOX5Yh:VfLcWh9olQ3boYR9hmK/sQTk96kAD

  Score

  10^/10

  latentbotpersistencetrojan

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2