Overview

overview

10

Static

static

3

f661db54f6...18.exe

windows7-x64

10

f661db54f6...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f661db54f670a0d3cba8fc3c5fd37cad_JaffaCakes118

  • Size

    191KB

  • Sample

    241216-ahxqjstpbt

  • MD5

    f661db54f670a0d3cba8fc3c5fd37cad

  • SHA1

    f3da018ee06b903b1e68a6c5aad93686fdcfd17b

  • SHA256

    f6a8c08a4c28de5e906f052199e4391f111356f00bb230bebf87c03494f735bd

  • SHA512

    f8b0644bff7db28a68d8d81521ef986b73225294f07aa03eae605460208d0d8a3aea7aaf61ba139ec80a5542b095b2857b46ed253dc4fada72e80a582c187bfa

  • SSDEEP

    3072:YSQ0TjdzACUj9ZV7IDGhChFUjwsDM62ImJdbd3e/2wIBQ2vzU/X+Lx:bfxdUJ8ChSFLsz27Jdbdf3EX

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      f661db54f670a0d3cba8fc3c5fd37cad_JaffaCakes118

    • Size

      191KB

    • MD5

      f661db54f670a0d3cba8fc3c5fd37cad

    • SHA1

      f3da018ee06b903b1e68a6c5aad93686fdcfd17b

    • SHA256

      f6a8c08a4c28de5e906f052199e4391f111356f00bb230bebf87c03494f735bd

    • SHA512

      f8b0644bff7db28a68d8d81521ef986b73225294f07aa03eae605460208d0d8a3aea7aaf61ba139ec80a5542b095b2857b46ed253dc4fada72e80a582c187bfa

    • SSDEEP

      3072:YSQ0TjdzACUj9ZV7IDGhChFUjwsDM62ImJdbd3e/2wIBQ2vzU/X+Lx:bfxdUJ8ChSFLsz27Jdbdf3EX

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks