General

  • Target

    Teletubbies-Asst-Thumbnail.png

  • Size

    237KB

  • Sample

    250416-dp26dsywhz

  • MD5

    a2e5b9bf96a0bb0ad5afa765bdc88a3c

  • SHA1

    e60cf3bc88e35b7b471a20f1ca619ce7bf268bd1

  • SHA256

    b101408bab05ffc25b0ef735770840f40230fb99d9e10d420337d6113e6c1f5a

  • SHA512

    79aaf6510936e77d0adb03fdee72a4197a645ed84b9e32daf708146e8a96bcffb95fde699ba2dfb646a88a55de9c77f4b1582c403e1982b5dbce2d1e1a6a90f5

  • SSDEEP

    3072:sA+McPEy54C5TmVveG8cO/RqYG1FCk6paC6Q8LByqWmhhpaGhWGBom9u03m7bNJD:VSEGB5TGR0paBvys/9u03mHNJg9WrCm

Malware Config

Extracted

Family

latentbot

C2

epicpbgloba.zapto.org

epicpbglobal.zapto.org

Targets

    • Target

      Teletubbies-Asst-Thumbnail.png

    • Size

      237KB

    • MD5

      a2e5b9bf96a0bb0ad5afa765bdc88a3c

    • SHA1

      e60cf3bc88e35b7b471a20f1ca619ce7bf268bd1

    • SHA256

      b101408bab05ffc25b0ef735770840f40230fb99d9e10d420337d6113e6c1f5a

    • SHA512

      79aaf6510936e77d0adb03fdee72a4197a645ed84b9e32daf708146e8a96bcffb95fde699ba2dfb646a88a55de9c77f4b1582c403e1982b5dbce2d1e1a6a90f5

    • SSDEEP

      3072:sA+McPEy54C5TmVveG8cO/RqYG1FCk6paC6Q8LByqWmhhpaGhWGBom9u03m7bNJD:VSEGB5TGR0paBvys/9u03mHNJg9WrCm

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Latentbot family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v16

Tasks