Overview

overview

10

Static

static

3

d3077250c4...18.exe

windows7-x64

10

d3077250c4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3077250c4e3349bc0d512030cf04469_JaffaCakes118

  • Size

    186KB

  • Sample

    241207-salx7avrgy

  • MD5

    d3077250c4e3349bc0d512030cf04469

  • SHA1

    b0c3ac8518b484100b9d61c43bf930a8f007c784

  • SHA256

    4fd07e4ba860cf2e651889e12511af622472194b80869ed10334d8575e4fcdb7

  • SHA512

    67bc93775488e743ff1d10f537eb25811d22915f03e4d0a21c349eb8b24540b4e42d3292877e1ac6a5c270b36f7470d0a1813faefcc9e3efc731e20066135eb4

  • SSDEEP

    3072:UX7KBgA6xRQqW/w/8gT2ayPiN8IL6GTYgoL+gl3vY8Nf:UrKB96x5WuKiCInTal3vDf

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      d3077250c4e3349bc0d512030cf04469_JaffaCakes118

    • Size

      186KB

    • MD5

      d3077250c4e3349bc0d512030cf04469

    • SHA1

      b0c3ac8518b484100b9d61c43bf930a8f007c784

    • SHA256

      4fd07e4ba860cf2e651889e12511af622472194b80869ed10334d8575e4fcdb7

    • SHA512

      67bc93775488e743ff1d10f537eb25811d22915f03e4d0a21c349eb8b24540b4e42d3292877e1ac6a5c270b36f7470d0a1813faefcc9e3efc731e20066135eb4

    • SSDEEP

      3072:UX7KBgA6xRQqW/w/8gT2ayPiN8IL6GTYgoL+gl3vY8Nf:UrKB96x5WuKiCInTal3vDf

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks