General

  • Target

    JaffaCakes118_b9015d7005917e7b3b7dd9e46471e597

  • Size

    248KB

  • Sample

    250414-2l9m3asrw8

  • MD5

    b9015d7005917e7b3b7dd9e46471e597

  • SHA1

    d8a3ba08a7e163135a0a1bcc0a5963f936e659b2

  • SHA256

    16ce5561a44924ae8299cac899ed24c212d93a7b273a183a5a66880769424b18

  • SHA512

    99d90f41c54b2c903dec8037d23702396c5950a03a1b8825202c2e47d775dcf1bd346f356e5739ab5c54fbae7f5ac4c70089e21f94daf20e17607b9e0c496f3d

  • SSDEEP

    6144:p08ln3ce15OV6K4zf2xWOL+jHBlTQB+xWHyGLc:pL5qQ+xWOLIHBlTc+xgc

Malware Config

Extracted

Family

latentbot

C2

aboooooooooooooos.zapto.org

Targets

    • Target

      JaffaCakes118_b9015d7005917e7b3b7dd9e46471e597

    • Size

      248KB

    • MD5

      b9015d7005917e7b3b7dd9e46471e597

    • SHA1

      d8a3ba08a7e163135a0a1bcc0a5963f936e659b2

    • SHA256

      16ce5561a44924ae8299cac899ed24c212d93a7b273a183a5a66880769424b18

    • SHA512

      99d90f41c54b2c903dec8037d23702396c5950a03a1b8825202c2e47d775dcf1bd346f356e5739ab5c54fbae7f5ac4c70089e21f94daf20e17607b9e0c496f3d

    • SSDEEP

      6144:p08ln3ce15OV6K4zf2xWOL+jHBlTQB+xWHyGLc:pL5qQ+xWOLIHBlTc+xgc

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Latentbot family

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

MITRE ATT&CK Enterprise v16

Tasks