Overview

overview

10

Static

static

3

e071758cda...18.exe

windows7-x64

10

e071758cda...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e071758cda118bd560e386cc346afc0d_JaffaCakes118

  • Size

    193KB

  • Sample

    241211-h97ntssqbv

  • MD5

    e071758cda118bd560e386cc346afc0d

  • SHA1

    0542052593e85c5aca8fd0f7a98e4ed6c24ad861

  • SHA256

    3c2f4d5670d70eb07264e142c870f66d168842cf6f9e783e7a41093f2f27566f

  • SHA512

    7b7c04f719b27ef47d45d1dc821e0b51a8ab47ed2c9bf6a04f668b577dbaad58e86b094bd18f3edfceaee605c00534f7d2012c0cdfd771d6342a5bb513b6e7af

  • SSDEEP

    6144:scWG2K8+lZjDVanO1xzJscAjMd3V2ezaz4v90du:sVGFrnt1kAza8vwu

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      e071758cda118bd560e386cc346afc0d_JaffaCakes118

    • Size

      193KB

    • MD5

      e071758cda118bd560e386cc346afc0d

    • SHA1

      0542052593e85c5aca8fd0f7a98e4ed6c24ad861

    • SHA256

      3c2f4d5670d70eb07264e142c870f66d168842cf6f9e783e7a41093f2f27566f

    • SHA512

      7b7c04f719b27ef47d45d1dc821e0b51a8ab47ed2c9bf6a04f668b577dbaad58e86b094bd18f3edfceaee605c00534f7d2012c0cdfd771d6342a5bb513b6e7af

    • SSDEEP

      6144:scWG2K8+lZjDVanO1xzJscAjMd3V2ezaz4v90du:sVGFrnt1kAza8vwu

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks