Overview

overview

10

Static

static

3

edf6ca9d5b...18.exe

windows7-x64

10

edf6ca9d5b...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edf6ca9d5b98c91415ccf111b558edca_JaffaCakes118

  • Size

    199KB

  • Sample

    241214-kq9eesymgj

  • MD5

    edf6ca9d5b98c91415ccf111b558edca

  • SHA1

    68626b8b39bee844a3e3650338aac30e8c297f61

  • SHA256

    be1f65d9537dcb5f4f81724834d80692575b7817e34ed0a0a84686d4e2e53dd7

  • SHA512

    c9ef41c68a0a8155ddc7ac00b341c795df61da36db8e9ef09cc54164ba4c16fff1bdb5af4a577f7fa7f48f1f92a805ce56ee243365d0faa48d5e853b3d5c602b

  • SSDEEP

    6144:xqHhNbbqGSrQf2Q7846hSnwt1JRThXjE:cHPbb32QJw5bXo

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      edf6ca9d5b98c91415ccf111b558edca_JaffaCakes118

    • Size

      199KB

    • MD5

      edf6ca9d5b98c91415ccf111b558edca

    • SHA1

      68626b8b39bee844a3e3650338aac30e8c297f61

    • SHA256

      be1f65d9537dcb5f4f81724834d80692575b7817e34ed0a0a84686d4e2e53dd7

    • SHA512

      c9ef41c68a0a8155ddc7ac00b341c795df61da36db8e9ef09cc54164ba4c16fff1bdb5af4a577f7fa7f48f1f92a805ce56ee243365d0faa48d5e853b3d5c602b

    • SSDEEP

      6144:xqHhNbbqGSrQf2Q7846hSnwt1JRThXjE:cHPbb32QJw5bXo

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks