General

  • Target
    Downloader.rar
  • Size 236KB
  • Sample260620-yzat4sat6w
  • SHA256 ba03fc104a414a2e55cc716f5a0e683de8938aa278538bcd5d971e5a5f464edb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • latentbot

C2
  • gamingonline.zapto.org

Targets

    • Target
      Downloader.rar
    • Size 236KB
    • SHA256 ba03fc104a414a2e55cc716f5a0e683de8938aa278538bcd5d971e5a5f464edb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: LatentBot

      Modular trojan written in Delphi which has been in-the-wild since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks