Overview

overview

10

Static

static

3

f7ec5b7308...18.exe

windows7-x64

10

f7ec5b7308...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7ec5b73084c9eeba09617232a038545_JaffaCakes118

  • Size

    198KB

  • Sample

    241216-h815nazpf1

  • MD5

    f7ec5b73084c9eeba09617232a038545

  • SHA1

    24528b8ada8984d6bb83aa0e2ae6ab4b3d2ef086

  • SHA256

    4227bf45d323f23bd70c68285d659212b64e16e82ac96abb9e4272074ae97218

  • SHA512

    a6508bead6c3e678464fbeecdef143f9af94fd208dd94d46c41778fbba365c9ca6469c77f94c6f8a9860a91d6d4e29d3de6475302f2391531f20855ba4bb2766

  • SSDEEP

    6144:JBAa+BClfws7YPDejInJs5HunW2k51fqJhThn:JBL+Yai5qWx51f+h

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      f7ec5b73084c9eeba09617232a038545_JaffaCakes118

    • Size

      198KB

    • MD5

      f7ec5b73084c9eeba09617232a038545

    • SHA1

      24528b8ada8984d6bb83aa0e2ae6ab4b3d2ef086

    • SHA256

      4227bf45d323f23bd70c68285d659212b64e16e82ac96abb9e4272074ae97218

    • SHA512

      a6508bead6c3e678464fbeecdef143f9af94fd208dd94d46c41778fbba365c9ca6469c77f94c6f8a9860a91d6d4e29d3de6475302f2391531f20855ba4bb2766

    • SSDEEP

      6144:JBAa+BClfws7YPDejInJs5HunW2k51fqJhThn:JBL+Yai5qWx51f+h

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks