Overview

overview

10

Static

static

3

1e1bdfd4e6...6c.exe

windows7-x64

10

1e1bdfd4e6...6c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e1bdfd4e612a1d832ec913ced852a906b28863e77f23b011013bd86ce1bbe6c.exe

  • Size

    188KB

  • Sample

    241205-bna96s1jgy

  • MD5

    7ee39b38f507ed65c497c49f2f6f0504

  • SHA1

    7580cbfc8913a8f7d3582958bd428fd281882db2

  • SHA256

    1e1bdfd4e612a1d832ec913ced852a906b28863e77f23b011013bd86ce1bbe6c

  • SHA512

    a40fb026f693c715215de45286d10defff6cd5684f86f24ea0aa2b87f0c121ac3491d17b73ec049b8f9f39b93e0a449dd5775cf08e6bdc917f81a686675ab081

  • SSDEEP

    3072:2s/pebp6nCyce+ORB7ur9WMQn+OQVm24KsOz8p5UhrJHWnTA+ims:9LPceHRBQWqwXEz8puRWnTy

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      1e1bdfd4e612a1d832ec913ced852a906b28863e77f23b011013bd86ce1bbe6c.exe

    • Size

      188KB

    • MD5

      7ee39b38f507ed65c497c49f2f6f0504

    • SHA1

      7580cbfc8913a8f7d3582958bd428fd281882db2

    • SHA256

      1e1bdfd4e612a1d832ec913ced852a906b28863e77f23b011013bd86ce1bbe6c

    • SHA512

      a40fb026f693c715215de45286d10defff6cd5684f86f24ea0aa2b87f0c121ac3491d17b73ec049b8f9f39b93e0a449dd5775cf08e6bdc917f81a686675ab081

    • SSDEEP

      3072:2s/pebp6nCyce+ORB7ur9WMQn+OQVm24KsOz8p5UhrJHWnTA+ims:9LPceHRBQWqwXEz8puRWnTy

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks