General

  • Target

    JaffaCakes118_0174d909a137b49304b77774dc2a43f0

  • Size

    413KB

  • Sample

    250121-c3346sskez

  • MD5

    0174d909a137b49304b77774dc2a43f0

  • SHA1

    2b640b570b0ff4eac5b709b390310965f003309b

  • SHA256

    3333d7ec5965b7f14ce479e5b6664dbda35b8aa2cd64c3de548530b88e041e53

  • SHA512

    5b1418b3d18317355cba32c85eed58ca7ceb0197db3c66e05db6488530b4f327d10afd86c481ffbe168bdb45cb51c48d90160241490d0724da321f5cb8a592fb

  • SSDEEP

    12288:9hah2PKBPo8HLT8geZVmVR5xIwIFBhYqItMZohE:OwSyi8goSuBhYZ2

Malware Config

Extracted

Family

latentbot

C2

camyhonulux.zapto.org

Targets

    • Target

      JaffaCakes118_0174d909a137b49304b77774dc2a43f0

    • Size

      413KB

    • MD5

      0174d909a137b49304b77774dc2a43f0

    • SHA1

      2b640b570b0ff4eac5b709b390310965f003309b

    • SHA256

      3333d7ec5965b7f14ce479e5b6664dbda35b8aa2cd64c3de548530b88e041e53

    • SHA512

      5b1418b3d18317355cba32c85eed58ca7ceb0197db3c66e05db6488530b4f327d10afd86c481ffbe168bdb45cb51c48d90160241490d0724da321f5cb8a592fb

    • SSDEEP

      12288:9hah2PKBPo8HLT8geZVmVR5xIwIFBhYqItMZohE:OwSyi8goSuBhYZ2

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Latentbot family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks