General

  • Target

    2ce843f4a84333fdc45df87bca67cc99_JaffaCakes118

  • Size

    628KB

  • Sample

    241009-hvjy8awakf

  • MD5

    2ce843f4a84333fdc45df87bca67cc99

  • SHA1

    baf94695e22fb15cffb31e3918ec5f2f42c1b0d8

  • SHA256

    f2851344f92e34a6e38bb89dbdd9131f934a0f3ac26432bd50580ac316ab20bd

  • SHA512

    bd670f880419681df687d3d8b4b42a4bb3c91ee8f1f4e2d0898a83bf53a0b0476064a344ec4efc5b45c049dcf5edfbe487f8829f69a79e5e924de1310f2182c0

  • SSDEEP

    3072:ptVArrrrr09rhAqrrrrr09rhACBMbabFgCrR8+rR8B/suM9TxHcrR80bb/prrrrm:ptV3QhQ3GJgK8+8B/e9TFU80b+QO

Malware Config

Extracted

Family

latentbot

C2

atualizador.zapto.org

Targets

    • Target

      2ce843f4a84333fdc45df87bca67cc99_JaffaCakes118

    • Size

      628KB

    • MD5

      2ce843f4a84333fdc45df87bca67cc99

    • SHA1

      baf94695e22fb15cffb31e3918ec5f2f42c1b0d8

    • SHA256

      f2851344f92e34a6e38bb89dbdd9131f934a0f3ac26432bd50580ac316ab20bd

    • SHA512

      bd670f880419681df687d3d8b4b42a4bb3c91ee8f1f4e2d0898a83bf53a0b0476064a344ec4efc5b45c049dcf5edfbe487f8829f69a79e5e924de1310f2182c0

    • SSDEEP

      3072:ptVArrrrr09rhAqrrrrr09rhACBMbabFgCrR8+rR8B/suM9TxHcrR80bb/prrrrm:ptV3QhQ3GJgK8+8B/e9TFU80b+QO

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Drops startup file

MITRE ATT&CK Enterprise v15

Tasks