Overview

overview

10

Static

static

3

91a7222173...18.exe

windows7-x64

10

91a7222173...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91a7222173a391b6c15ee064abb76d6a_JaffaCakes118

  • Size

    191KB

  • Sample

    241124-a85h3svrdy

  • MD5

    91a7222173a391b6c15ee064abb76d6a

  • SHA1

    326e76baa09939b8be28d0331c8fc0649b96ff10

  • SHA256

    b986ecb698196e2430d6d610d20ae40e17550fd848744ade456fdc039acd9d84

  • SHA512

    9114ab0c041de194f248250e007e0a0022df3f6f821a6feee834e810d4d3c309a50109b079117e63a6279d3000c85d2195720b85dd435405a0431ac979ee83b0

  • SSDEEP

    3072:OBtf6BpgA4D2LoIgCUb7bWzmIhrsG1zwO+0/i9CwqVsKKwGrQWb9lTLGaNo:Ofo4zIgRb7GmIhrbB7i9sM/bnTLGb

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      91a7222173a391b6c15ee064abb76d6a_JaffaCakes118

    • Size

      191KB

    • MD5

      91a7222173a391b6c15ee064abb76d6a

    • SHA1

      326e76baa09939b8be28d0331c8fc0649b96ff10

    • SHA256

      b986ecb698196e2430d6d610d20ae40e17550fd848744ade456fdc039acd9d84

    • SHA512

      9114ab0c041de194f248250e007e0a0022df3f6f821a6feee834e810d4d3c309a50109b079117e63a6279d3000c85d2195720b85dd435405a0431ac979ee83b0

    • SSDEEP

      3072:OBtf6BpgA4D2LoIgCUb7bWzmIhrsG1zwO+0/i9CwqVsKKwGrQWb9lTLGaNo:Ofo4zIgRb7GmIhrbB7i9sM/bnTLGb

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks