Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
06-10-2024 18:12
General
-
Target
1925a3929041b300c2c9bd5c17522b85_JaffaCakes118.pdf
-
Size
13KB
-
MD5
1925a3929041b300c2c9bd5c17522b85
-
SHA1
3ee3939600d28f795a791be6d9c0daa879e5d263
-
SHA256
77839bebaff847574402f74d6db041df8f6fbc7aae92b7b73f8e3441c630c0f4
-
SHA512
d9a67e5d7e795571cbebe33f355b1719e5696af33c07da54920bafd5bc4cfdd110147e0b02368dd58c1f293c85e6beb31d78e3430b0a2e8f8d96522e1daad543
-
SSDEEP
192:rQhzajYqwAO9G+/vvTs7hXbfym4GJVbBftJy/suiXnvQNi/60un/T8qvROdjzwu:shzaNwAO9GiM5fdtttrQi/60G78s4djN
Score
10/10
Malware Config
Extracted
Family
latentbot
C2
jaleeesratbi.zapto.org
Signatures
-
LatentBot
Modular trojan written in Delphi which has been in-the-wild since 2013.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1925a3929041b300c2c9bd5c17522b85_JaffaCakes118.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
472KB
-
Filesize
4KB