General

  • Target

    e43ad0436de2e63421f23dcc16bccfc0cb229b86ff64ce1f44b1c5db4f453e85.exe

  • Size

    169KB

  • Sample

    241204-zwlmwaxjej

  • MD5

    991d96d8c7baedda2df4ee1586a13f7c

  • SHA1

    5c4b93c23cba17479c581b967bb2b8b63b37453c

  • SHA256

    e43ad0436de2e63421f23dcc16bccfc0cb229b86ff64ce1f44b1c5db4f453e85

  • SHA512

    c0652f7f7d8f67a2e1d4b1cd5e0c3c01626262ab050e8b380f330bfb0ad984347cefb645e2da872dcec2fe5378e8585ff22eceb8d22723a62e38b406fa73c415

  • SSDEEP

    3072:pYtI3xw7+scZSKf9OnYqjbsYUdhV+ZF+Q0kx+p9s4lgUBS9Rh/duUkv:pP3xeNcZSKf9yYosXdhTksp9IdEl

Malware Config

Targets

    • Target

      e43ad0436de2e63421f23dcc16bccfc0cb229b86ff64ce1f44b1c5db4f453e85.exe

    • Size

      169KB

    • MD5

      991d96d8c7baedda2df4ee1586a13f7c

    • SHA1

      5c4b93c23cba17479c581b967bb2b8b63b37453c

    • SHA256

      e43ad0436de2e63421f23dcc16bccfc0cb229b86ff64ce1f44b1c5db4f453e85

    • SHA512

      c0652f7f7d8f67a2e1d4b1cd5e0c3c01626262ab050e8b380f330bfb0ad984347cefb645e2da872dcec2fe5378e8585ff22eceb8d22723a62e38b406fa73c415

    • SSDEEP

      3072:pYtI3xw7+scZSKf9OnYqjbsYUdhV+ZF+Q0kx+p9s4lgUBS9Rh/duUkv:pP3xeNcZSKf9yYosXdhTksp9IdEl

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks