Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
14-10-2024 19:19
General
-
Target
43c997457a0e3ffe3e210adaf387bb68_JaffaCakes118.exe
-
Size
48KB
-
MD5
43c997457a0e3ffe3e210adaf387bb68
-
SHA1
1855916dcdb5deeb49609cfed062e9707932f37e
-
SHA256
de0096c5adc377d6d1a144ec1b9b72bc54d37efa1a6afdf40d40001d30cf0460
-
SHA512
96d9fc1731e78faa3aa9a275d309fc5c41e4ad170dca958aa0d8f15a7a8066538293b84c82b2cf94c6516a4f9272c6df7df7b41d69b3a4f56e27e8c3f663fac1
-
SSDEEP
768:1VdmvmGO0DkFIuNlFzFpB1EATfWmvmGOY:UvmGO0DkDrbZTfjvmGO
Score
10/10
Malware Config
Extracted
Family
latentbot
C2
atualizador.zapto.org
Signatures
-
LatentBot
Modular trojan written in Delphi which has been in-the-wild since 2013.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\43c997457a0e3ffe3e210adaf387bb68_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\43c997457a0e3ffe3e210adaf387bb68_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
88KB
-
Filesize
88KB