Extracted

Extracted

• • Target

    JaffaCakes118_f805c6334fd3c8ad238ee13009a29c9e

  • Size

    281KB

  • MD5

    f805c6334fd3c8ad238ee13009a29c9e

  • SHA1

    aa419557470d0880bc122eea03c13ee840027dbf

  • SHA256

    2b5aa1d0de017fff07bb9844f2542b152691677596f61c1c7796b25515c1676a

  • SHA512

    ba10204532b4dd2598e911f153fbb6bc74d2ff7dae9926023a8fe14a770a356373b7d7854e7d56203b34cbbe527af3b1c0c2036def8622a52470306d5e5e7fcf

  • SSDEEP

    6144:ey+phnTwlTLfkixFUQKf3D7TnBAZ5qhbxd:b+pJ0lYixsfvDBAzK9d

  Score

  10^/10

  latentbotdiscoverypersistencetrojanupx

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Latentbot family

    latentbot

  • Adds policy Run key to start application

    persistence

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2