Overview

overview

10

Static

static

1

NFE_563396...78.vbs

windows10-2004-x64

10

NFE_563396...78.vbs

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    01102025_0442_NFE_5633969846112655412413290377898720450078.vbs.zip
  • Size 1.9MB
  • Sample251001-fbq73sap2s
  • SHA256 a315204712fa9e07e1aaf5e06b80c449d83faacdd570e17b8731db24864fc0d7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
latentbotdiscoveryexecutionpersistencetrojan

Malware Config

Targets

    • Target
      NFE_5633969846112655412413290377898720450078.vbs
    • Size 6.2MB
    • SHA256 90069d0c422b3447a106fe799f058394d5571f21270053a106f39fb6352afb83
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoveryexecutionlatentbotpersistencetrojan

    • LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

      trojanlatentbot

    • Latentbot family

      latentbot

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks