General
-
Target
f27e3f76056154ebca5131a10f2a0ab5_JaffaCakes118
-
Size
155KB
-
Sample
241215-f4fxtavpfx
-
MD5
f27e3f76056154ebca5131a10f2a0ab5
-
SHA1
3f24c3b5f80593ae6726b2c009dae7d9888a2c77
-
SHA256
be3f5828d78904e924d91dbb266996cd58110fec81320af5a3f2d700f2b834d8
-
SHA512
4db527c42097ebc011b02507c97ad814c5c875061c567df6c2031ee6780a7b853bb2485007cfadf70515da34abe09659923c2019f08908b33750ac20d2d39b63
-
SSDEEP
3072:vw/9LWqGjWmpYCMg9kQyaW6ywE8LU/1Bd8A9GRikTlqZkWMwrw7DuC:vwpWqPmuCMg9kdIU/1oA98JWMw+
Static task
static1
Behavioral task
behavioral1
Sample
f27e3f76056154ebca5131a10f2a0ab5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f27e3f76056154ebca5131a10f2a0ab5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
f27e3f76056154ebca5131a10f2a0ab5_JaffaCakes118
-
Size
155KB
-
MD5
f27e3f76056154ebca5131a10f2a0ab5
-
SHA1
3f24c3b5f80593ae6726b2c009dae7d9888a2c77
-
SHA256
be3f5828d78904e924d91dbb266996cd58110fec81320af5a3f2d700f2b834d8
-
SHA512
4db527c42097ebc011b02507c97ad814c5c875061c567df6c2031ee6780a7b853bb2485007cfadf70515da34abe09659923c2019f08908b33750ac20d2d39b63
-
SSDEEP
3072:vw/9LWqGjWmpYCMg9kQyaW6ywE8LU/1Bd8A9GRikTlqZkWMwrw7DuC:vwpWqPmuCMg9kdIU/1oA98JWMw+
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Adds Run key to start application
-