Overview

overview

10

Static

static

3

f1de960b6a...18.exe

windows7-x64

10

f1de960b6a...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1de960b6a31d7a4bd2377df2025a792_JaffaCakes118

  • Size

    194KB

  • Sample

    241215-cyb5ws1pe1

  • MD5

    f1de960b6a31d7a4bd2377df2025a792

  • SHA1

    c50ce945db56a8a2fe1899a8cba5ee7c74295e2b

  • SHA256

    2302fecc8833997d859dae05079448deda61931ad05bea43e3e8388a00a6b27f

  • SHA512

    006592e5f2b8e297a48e1f2e7ef27023455569541ab9679361be62c79da30461daff42a6f63ed7c3bf40c65c7a4a8cf95bf0a74313b620939ab7cc7bff430fa9

  • SSDEEP

    6144:+VtVcTYzfCfGz2UgK30RkP7LJ9OQo2Ru:+vVfOGKxU0RGJzfR

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      f1de960b6a31d7a4bd2377df2025a792_JaffaCakes118

    • Size

      194KB

    • MD5

      f1de960b6a31d7a4bd2377df2025a792

    • SHA1

      c50ce945db56a8a2fe1899a8cba5ee7c74295e2b

    • SHA256

      2302fecc8833997d859dae05079448deda61931ad05bea43e3e8388a00a6b27f

    • SHA512

      006592e5f2b8e297a48e1f2e7ef27023455569541ab9679361be62c79da30461daff42a6f63ed7c3bf40c65c7a4a8cf95bf0a74313b620939ab7cc7bff430fa9

    • SSDEEP

      6144:+VtVcTYzfCfGz2UgK30RkP7LJ9OQo2Ru:+vVfOGKxU0RGJzfR

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks