General

  • Target

    e77b16918e4c32f4d8fdd1fce0a33b65_JaffaCakes118

  • Size

    178KB

  • Sample

    241212-v2nxzatkam

  • MD5

    e77b16918e4c32f4d8fdd1fce0a33b65

  • SHA1

    9a5c501771ceb7219a9885a9890f48865603d2a4

  • SHA256

    b2342931a413fadbc60bcd00d9add49bebbf147ab3bb305a80d8eb6169d549f4

  • SHA512

    d11a6501bc583d74c7439a962b2f561e5103ba2f0f38e6edb88a16b7608cbbc356c050a57a33cbea0e7eb89539849d86f3b1bc111afc1ddcc27d9bf2a24f63dd

  • SSDEEP

    3072:pajLOPuOHlI1DN/+VNJCZIkmI7CEJgDbovVbg+bDSd:wjiPupDN/YCWkVCDotU1d

Malware Config

Targets

    • Target

      e77b16918e4c32f4d8fdd1fce0a33b65_JaffaCakes118

    • Size

      178KB

    • MD5

      e77b16918e4c32f4d8fdd1fce0a33b65

    • SHA1

      9a5c501771ceb7219a9885a9890f48865603d2a4

    • SHA256

      b2342931a413fadbc60bcd00d9add49bebbf147ab3bb305a80d8eb6169d549f4

    • SHA512

      d11a6501bc583d74c7439a962b2f561e5103ba2f0f38e6edb88a16b7608cbbc356c050a57a33cbea0e7eb89539849d86f3b1bc111afc1ddcc27d9bf2a24f63dd

    • SSDEEP

      3072:pajLOPuOHlI1DN/+VNJCZIkmI7CEJgDbovVbg+bDSd:wjiPupDN/YCWkVCDotU1d

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks