Overview

overview

10

Static

static

3

dfe1ef46d2...18.exe

windows7-x64

10

dfe1ef46d2...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfe1ef46d25884363e819d7f0098903d_JaffaCakes118

  • Size

    164KB

  • Sample

    241211-e3rggswqdx

  • MD5

    dfe1ef46d25884363e819d7f0098903d

  • SHA1

    ae3e06a4d768971c59fd6f6e169330d076b88932

  • SHA256

    a713ab6986f9c21944f0ee01c7fe5c4cd0c9291507e2c2d7e3e8f30c8b858c1d

  • SHA512

    bedbd53664494efbe754fd3ea401f17e4dddacc96286c0a12be05c0b12828877df3a9a3c5917968773cd82888b474667e6dab5cd8bb359bdddc0470d76eff37a

  • SSDEEP

    3072:L4urZQ8GkP9rSVL/hGcShwLxJzaBD3M8tTAtc1RhrSHul+muhqbY4ZLDWasu8cT8:EcF5uZ9g8xJIlitc1RhrSHZtwLDlsub

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      dfe1ef46d25884363e819d7f0098903d_JaffaCakes118

    • Size

      164KB

    • MD5

      dfe1ef46d25884363e819d7f0098903d

    • SHA1

      ae3e06a4d768971c59fd6f6e169330d076b88932

    • SHA256

      a713ab6986f9c21944f0ee01c7fe5c4cd0c9291507e2c2d7e3e8f30c8b858c1d

    • SHA512

      bedbd53664494efbe754fd3ea401f17e4dddacc96286c0a12be05c0b12828877df3a9a3c5917968773cd82888b474667e6dab5cd8bb359bdddc0470d76eff37a

    • SSDEEP

      3072:L4urZQ8GkP9rSVL/hGcShwLxJzaBD3M8tTAtc1RhrSHul+muhqbY4ZLDWasu8cT8:EcF5uZ9g8xJIlitc1RhrSHZtwLDlsub

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks