General
-
Target
e47cb440b43181cb694bc1ebb22d922d_JaffaCakes118
-
Size
176KB
-
Sample
241212-d1zveatmcp
-
MD5
e47cb440b43181cb694bc1ebb22d922d
-
SHA1
1ca90c03c9060b73e74f3469d859db89819eec7c
-
SHA256
5c84ea53ca85a16d74601cdee6d7b3943f9d10ea8262a9078f7bd0ddc38d3540
-
SHA512
877d21f34de7c82210df6cde2b08cce7e4547ae94baffe7f75959cc033475393743d82b516671d8d589faff58af376de82347db3270b3bfb5979d06efae77424
-
SSDEEP
3072:KxCrVBXL/RVGnMVzIUA0YNue4TrKAfH8jzzKGT0kcIsnWiP4MUm2:1pQszJCNue4HZfH8jPrbuWiP4G2
Static task
static1
Behavioral task
behavioral1
Sample
e47cb440b43181cb694bc1ebb22d922d_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
e47cb440b43181cb694bc1ebb22d922d_JaffaCakes118
-
Size
176KB
-
MD5
e47cb440b43181cb694bc1ebb22d922d
-
SHA1
1ca90c03c9060b73e74f3469d859db89819eec7c
-
SHA256
5c84ea53ca85a16d74601cdee6d7b3943f9d10ea8262a9078f7bd0ddc38d3540
-
SHA512
877d21f34de7c82210df6cde2b08cce7e4547ae94baffe7f75959cc033475393743d82b516671d8d589faff58af376de82347db3270b3bfb5979d06efae77424
-
SSDEEP
3072:KxCrVBXL/RVGnMVzIUA0YNue4TrKAfH8jzzKGT0kcIsnWiP4MUm2:1pQszJCNue4HZfH8jPrbuWiP4G2
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Modifies WinLogon for persistence
-