cycbot | 69ae7d81eb9d62b16a92c83c337f713c43c5c31b43d85b5ee3d82411381bf0fb | Triage

Submit
Reports

Overview

overview

Static

static

3

d1acdfb5b7...18.exe

windows7-x64

d1acdfb5b7...18.exe

windows10-2004-x64

3

Sharing

General

Target

d1acdfb5b72389d344febdafc9c3fb27_JaffaCakes118
Size

193KB
Sample

241207-k7ew5swkb1
MD5

d1acdfb5b72389d344febdafc9c3fb27
SHA1

d67ecd616a05deaebc54698dbe0cbd2db0ca8a15
SHA256

69ae7d81eb9d62b16a92c83c337f713c43c5c31b43d85b5ee3d82411381bf0fb
SHA512

f08c537f35bcd87d76c64bec876e4281bf7ab52ace2491844005a80e9d6691f2e3abead39aa5066731ed940aead2e427a98f1efbcd20515e5cac587cd1df5c86
SSDEEP

3072:QXebiNyM8ceOGd/L6Tr27tErhSAnvG6FJgztyvhobyv9Feyq+imnDXZKsz:QfivOI2+QhSANJg50KbuFeyq+imnDf

Score

10^/10

cycbot backdoor discovery rat spyware stealer upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d1acdfb5b72389d344febdafc9c3fb27_JaffaCakes118.exe

Resource

win7-20241010-en

cycbot backdoor discovery rat spyware stealer upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

d1acdfb5b72389d344febdafc9c3fb27_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  d1acdfb5b72389d344febdafc9c3fb27_JaffaCakes118
- Size
  
  193KB
- MD5
  
  d1acdfb5b72389d344febdafc9c3fb27
- SHA1
  
  d67ecd616a05deaebc54698dbe0cbd2db0ca8a15
- SHA256
  
  69ae7d81eb9d62b16a92c83c337f713c43c5c31b43d85b5ee3d82411381bf0fb
- SHA512
  
  f08c537f35bcd87d76c64bec876e4281bf7ab52ace2491844005a80e9d6691f2e3abead39aa5066731ed940aead2e427a98f1efbcd20515e5cac587cd1df5c86
- SSDEEP
  
  3072:QXebiNyM8ceOGd/L6Tr27tErhSAnvG6FJgztyvhobyv9Feyq+imnDXZKsz:QfivOI2+QhSANJg50KbuFeyq+imnDf
Score

10^/10

cycbot backdoor discovery rat spyware stealer upx
- Cycbot
  Cycbot is a backdoor and trojan written in C++..
  backdoor rat cycbot
- Cycbot family
  cycbot
- Detects Cycbot payload
  Cycbot is a backdoor and trojan written in C++.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cycbotbackdoordiscoveryratspywarestealerupx

behavioral2

© 2018-2025

Terms | Privacy