Overview

overview

10

Static

static

3

ec477414a4...18.exe

windows7-x64

10

ec477414a4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec477414a41353fe0ef989b49ee5601b_JaffaCakes118

  • Size

    169KB

  • Sample

    241213-tevxbstlat

  • MD5

    ec477414a41353fe0ef989b49ee5601b

  • SHA1

    7e05292993ffe029a5642cc1b26cd7a0eeaa9c9e

  • SHA256

    c9375aa7c4ba5f8dea24a40a4dd67e7ffb232f08d63e05c4044b862ced5251c3

  • SHA512

    645702e775923febe5001eb18954efc76d7b7360107687922f690713f31c8549989d9243cbeb64b4a849849f64103db86300446d4e74c04ddecb985c6df3bd65

  • SSDEEP

    3072:CY1hC/qJjfzN3vb67yN4RpKcZRhBDBRA5bQHACbpb8MO99R/P9NkPOd3MOYs:CYSyh53PNaPZR4VS98bnEPOd3M4

Score
10/10
cycbotbackdoordiscoverypersistenceratupx

Malware Config

Targets

    • Target

      ec477414a41353fe0ef989b49ee5601b_JaffaCakes118

    • Size

      169KB

    • MD5

      ec477414a41353fe0ef989b49ee5601b

    • SHA1

      7e05292993ffe029a5642cc1b26cd7a0eeaa9c9e

    • SHA256

      c9375aa7c4ba5f8dea24a40a4dd67e7ffb232f08d63e05c4044b862ced5251c3

    • SHA512

      645702e775923febe5001eb18954efc76d7b7360107687922f690713f31c8549989d9243cbeb64b4a849849f64103db86300446d4e74c04ddecb985c6df3bd65

    • SSDEEP

      3072:CY1hC/qJjfzN3vb67yN4RpKcZRhBDBRA5bQHACbpb8MO99R/P9NkPOd3MOYs:CYSyh53PNaPZR4VS98bnEPOd3M4

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks