General
-
Target
f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118
-
Size
168KB
-
Sample
241214-1ncwfaxjeq
-
MD5
f0dbcd3c1585b55c99428780fa74d24d
-
SHA1
542e8e0c2ac9a433c4a9838d9de1517edc0e05cb
-
SHA256
063e2921799de8768c47a43ddb6e231750ea1cccce23251783e4a4e6d620c4c3
-
SHA512
524729103085d754f520e3edd5690cc9daefec2c03f56d25c94c3a1f71bd91ba95ca8d24797e92634c28b8f2775b51995d7a20c9db68424a4b227965d31d314b
-
SSDEEP
3072:PFh2I8BLRpR6UToZUCJ+9qo6lz6ffwduXn5ifcynlT7rlLr6W1/oeyHNW3jf1Zy+:PFP8BVpsZn9uX5ifcy5Jr6WxZytU1ZCO
Static task
static1
Behavioral task
behavioral1
Sample
f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118
-
Size
168KB
-
MD5
f0dbcd3c1585b55c99428780fa74d24d
-
SHA1
542e8e0c2ac9a433c4a9838d9de1517edc0e05cb
-
SHA256
063e2921799de8768c47a43ddb6e231750ea1cccce23251783e4a4e6d620c4c3
-
SHA512
524729103085d754f520e3edd5690cc9daefec2c03f56d25c94c3a1f71bd91ba95ca8d24797e92634c28b8f2775b51995d7a20c9db68424a4b227965d31d314b
-
SSDEEP
3072:PFh2I8BLRpR6UToZUCJ+9qo6lz6ffwduXn5ifcynlT7rlLr6W1/oeyHNW3jf1Zy+:PFP8BVpsZn9uX5ifcy5Jr6WxZytU1ZCO
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Adds Run key to start application
-