Overview

overview

10

Static

static

3

dc2df23d6d...18.exe

windows7-x64

3

dc2df23d6d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc2df23d6d7eb88bc9c262228f8391ba_JaffaCakes118

  • Size

    173KB

  • Sample

    241210-aqxqhs1rgl

  • MD5

    dc2df23d6d7eb88bc9c262228f8391ba

  • SHA1

    41feac1a05b090ade52db12b885570be4f5f0e78

  • SHA256

    71b893c3114cf33324998bbc2a7921feb75a78ff23c95966cb55b92a0f144b4e

  • SHA512

    30a9c015960595b4f66d69fdc4d04f778a7ed536cc29ddb6b797a0dafa1d7baf33fd72b4e205957b04365eb7dc2cb590df685b91611acde17a73f170749cff9c

  • SSDEEP

    3072:BEEGA3tiI4Jay87me/Y4uy5pMeSlY9pjrR:XGA3tMameiy52e2Yzj

Score
10/10
cycbotbackdoordiscoverypersistenceratupx

Malware Config

Targets

    • Target

      dc2df23d6d7eb88bc9c262228f8391ba_JaffaCakes118

    • Size

      173KB

    • MD5

      dc2df23d6d7eb88bc9c262228f8391ba

    • SHA1

      41feac1a05b090ade52db12b885570be4f5f0e78

    • SHA256

      71b893c3114cf33324998bbc2a7921feb75a78ff23c95966cb55b92a0f144b4e

    • SHA512

      30a9c015960595b4f66d69fdc4d04f778a7ed536cc29ddb6b797a0dafa1d7baf33fd72b4e205957b04365eb7dc2cb590df685b91611acde17a73f170749cff9c

    • SSDEEP

      3072:BEEGA3tiI4Jay87me/Y4uy5pMeSlY9pjrR:XGA3tMameiy52e2Yzj

    Score
    10/10
    discoverycycbotbackdoorpersistenceratupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks