General

  • Target

    JaffaCakes118_09c4c8f3185971c33b5c3031ca295e07

  • Size

    13KB

  • Sample

    250122-dj3jzavmbs

  • MD5

    09c4c8f3185971c33b5c3031ca295e07

  • SHA1

    a2c36931766755a768be2fdec3ed698ed7ffc551

  • SHA256

    13b5e66ff836372df8ef9318cf7e1cc498e535c7ce35e96f1076819c9061d31b

  • SHA512

    74f102a807dc759182d9e5c501913ce9ff2f577ccd34052ee8bb264406a14ad2035e1d3e3ca59af46c612845c4271d3d5987aa93ea0b7d096d879283032d54e4

  • SSDEEP

    384:shzaNwAO9GiM5fdtttrRQi/60G78s4djN:khZGiM5fdtttlQC6d8si

Malware Config

Extracted

Family

latentbot

C2

ratbiiqbtal.zapto.org

Targets

    • Target

      JaffaCakes118_09c4c8f3185971c33b5c3031ca295e07

    • Size

      13KB

    • MD5

      09c4c8f3185971c33b5c3031ca295e07

    • SHA1

      a2c36931766755a768be2fdec3ed698ed7ffc551

    • SHA256

      13b5e66ff836372df8ef9318cf7e1cc498e535c7ce35e96f1076819c9061d31b

    • SHA512

      74f102a807dc759182d9e5c501913ce9ff2f577ccd34052ee8bb264406a14ad2035e1d3e3ca59af46c612845c4271d3d5987aa93ea0b7d096d879283032d54e4

    • SSDEEP

      384:shzaNwAO9GiM5fdtttrRQi/60G78s4djN:khZGiM5fdtttlQC6d8si

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Latentbot family

MITRE ATT&CK Enterprise v15

Tasks