Overview

overview

10

Static

static

3

9f4143d53e...18.exe

windows7-x64

10

9f4143d53e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f4143d53ede1d1cccd420b6f11b1c85_JaffaCakes118

  • Size

    193KB

  • Sample

    241126-cn9neaynby

  • MD5

    9f4143d53ede1d1cccd420b6f11b1c85

  • SHA1

    2eaa73512b6b7d4ba114375b52a83686c5a41bfb

  • SHA256

    ab70fbbaace936789134eeb5fd44487fcc4e4d4d6a515a55198c56ede890e22a

  • SHA512

    14ded7cd5b61000ddade9176906a76d9f3a4ccd908a238fcc6c2cdd932265cd6914e4d09d69ca5348d2f28305b82b1d882fe5c16f2a10a68e4baf3dec7bca952

  • SSDEEP

    6144:PUm6IeNjMgdL6Q5SL6+JFst4LH3lX82x6cyH5f3wR:cRNj96Q56Fst4L1TxZi5PwR

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      9f4143d53ede1d1cccd420b6f11b1c85_JaffaCakes118

    • Size

      193KB

    • MD5

      9f4143d53ede1d1cccd420b6f11b1c85

    • SHA1

      2eaa73512b6b7d4ba114375b52a83686c5a41bfb

    • SHA256

      ab70fbbaace936789134eeb5fd44487fcc4e4d4d6a515a55198c56ede890e22a

    • SHA512

      14ded7cd5b61000ddade9176906a76d9f3a4ccd908a238fcc6c2cdd932265cd6914e4d09d69ca5348d2f28305b82b1d882fe5c16f2a10a68e4baf3dec7bca952

    • SSDEEP

      6144:PUm6IeNjMgdL6Q5SL6+JFst4LH3lX82x6cyH5f3wR:cRNj96Q56Fst4L1TxZi5PwR

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks