Overview

overview

10

Static

static

3

f3e1b9b60a...18.exe

windows7-x64

10

f3e1b9b60a...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3e1b9b60ad4226faa80252a7f86794f_JaffaCakes118

  • Size

    188KB

  • Sample

    241215-n3vnksvngq

  • MD5

    f3e1b9b60ad4226faa80252a7f86794f

  • SHA1

    f8a02cf8804bf98ef2d5c0c75e426770a7f5422a

  • SHA256

    b5fc97475f3332d7ea370998eb9ec98e00e99ba8d33c697e80c117eb26eb5f43

  • SHA512

    540f765e4c38f56a6cfa274e7165ecc9e59fd043a870711bbba7131bf4461b6a96b2bbe09d4f7fcb561fbc8e3d2093f120357b7cb9067489d6d993c08d194f59

  • SSDEEP

    3072:Vhjf8BYJw9ZB8nSZgkZ6kZc9aMHK/cGC5A7D1zRtVoKiG62LGDMv:jf1w6nSZgkFkGbf1lzbLW6

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      f3e1b9b60ad4226faa80252a7f86794f_JaffaCakes118

    • Size

      188KB

    • MD5

      f3e1b9b60ad4226faa80252a7f86794f

    • SHA1

      f8a02cf8804bf98ef2d5c0c75e426770a7f5422a

    • SHA256

      b5fc97475f3332d7ea370998eb9ec98e00e99ba8d33c697e80c117eb26eb5f43

    • SHA512

      540f765e4c38f56a6cfa274e7165ecc9e59fd043a870711bbba7131bf4461b6a96b2bbe09d4f7fcb561fbc8e3d2093f120357b7cb9067489d6d993c08d194f59

    • SSDEEP

      3072:Vhjf8BYJw9ZB8nSZgkZ6kZc9aMHK/cGC5A7D1zRtVoKiG62LGDMv:jf1w6nSZgkFkGbf1lzbLW6

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks