Overview

overview

10

Static

static

3

e7d4f7e15d...18.exe

windows7-x64

10

e7d4f7e15d...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7d4f7e15dbb9fbf88cb8c57a190776e_JaffaCakes118

  • Size

    197KB

  • Sample

    241212-xrjxdawlbn

  • MD5

    e7d4f7e15dbb9fbf88cb8c57a190776e

  • SHA1

    ba0c4677e378c7665288268625d14e11ead9b104

  • SHA256

    c152951274e3afead9c3766152fad0b25bc5f76e62d29d637bb41148d27c204b

  • SHA512

    edb1b659ac146840e8cde4c8adaab1b20e24250c2f4953508b14a46787fc74a9f0773ae0bfcbacc5abb81635cf725599d16a8976e0b875723284414062f0b83c

  • SSDEEP

    6144:5tE4PmN/zlkOk1KkMzT2rd/4a4sLqwrZft1jCVsvG:5f6mJ4S/Jqwdft4Wv

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      e7d4f7e15dbb9fbf88cb8c57a190776e_JaffaCakes118

    • Size

      197KB

    • MD5

      e7d4f7e15dbb9fbf88cb8c57a190776e

    • SHA1

      ba0c4677e378c7665288268625d14e11ead9b104

    • SHA256

      c152951274e3afead9c3766152fad0b25bc5f76e62d29d637bb41148d27c204b

    • SHA512

      edb1b659ac146840e8cde4c8adaab1b20e24250c2f4953508b14a46787fc74a9f0773ae0bfcbacc5abb81635cf725599d16a8976e0b875723284414062f0b83c

    • SSDEEP

      6144:5tE4PmN/zlkOk1KkMzT2rd/4a4sLqwrZft1jCVsvG:5f6mJ4S/Jqwdft4Wv

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks