latentbot | 8cbd0f56ac4ead0a40443d727fcb23293d95bcab7767a49a4e1edb6b5510f55c

Resubmissions

21/02/2025, 04:29

10/02/2025, 10:23

max time kernel
30s
max time network
20s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
10/02/2025, 10:23

Target
5ba043c074818fdd06ae1d3939ddfe7d3d35bab5d53445bc1f2f689859a87507
Size 35KB
Sample250210-mfat8ayphy
SHA256 5ba043c074818fdd06ae1d3939ddfe7d3d35bab5d53445bc1f2f689859a87507
MD5 63a2d0e77e1ccf1cde295862457d3a1b
SHA1 85c430247dc5e948f8b3b2b8820c33e1d0de8498
SHA512 166766932ce8306d5ac99d450dd7e99c3429073b6ed844a9bff64f971a2a3c7eb69516b88583e521b33292161a9dec28778f44f367815b515041bf799f3c7733
SSDEEP 384:5QlE/pCU+Pd3dCm6PzfubY6nZ2UHCsx6lLx6FpZ2iPKDkAKBfp37usOo8Vd6AK:YyYUCWzfqY6nZbCtlx8FS4AQahoA
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

LatentBot
Modular trojan written in Delphi which has been in-the-wild since 2013.
trojan latentbot
Latentbot family
latentbot

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/sys/kernel/random/uuid	5ba043c074818fdd06ae1d3939ddfe7d3d35bab5d53445bc1f2f689859a87507

/tmp/5ba043c074818fdd06ae1d3939ddfe7d3d35bab5d53445bc1f2f689859a87507
/tmp/5ba043c074818fdd06ae1d3939ddfe7d3d35bab5d53445bc1f2f689859a87507
1⤵
- Reads runtime system information
PID:2440