Overview

overview

10

Static

static

3

bd8c4f0393...bN.exe

windows7-x64

10

bd8c4f0393...bN.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd8c4f03932fa0171cf1fbd040d50269c1e3b7c7d84b04975753b3247e4652dbN.exe

  • Size

    187KB

  • Sample

    241217-ldppxswlf1

  • MD5

    f038c8abcb879e38bf27acb8db28e2a0

  • SHA1

    1c1fc5e80fd8b284607cfbaf9b8bf9b0cc58cdb4

  • SHA256

    bd8c4f03932fa0171cf1fbd040d50269c1e3b7c7d84b04975753b3247e4652db

  • SHA512

    637d73485aed793f9bada597a58593d8f5a0a9fbae862e7dea46fc6864c933bd5f84babcc1355d7418c5d147bc10732bb1e6408ad2792ed744011a8775d60f8d

  • SSDEEP

    3072:fb9fR6vPhkm9gDdMM9T4wYkgVGIeuK9RWZBmVPKCuoyH:fb9J6BkDdMMCwYkgwbu2VVPnuoU

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      bd8c4f03932fa0171cf1fbd040d50269c1e3b7c7d84b04975753b3247e4652dbN.exe

    • Size

      187KB

    • MD5

      f038c8abcb879e38bf27acb8db28e2a0

    • SHA1

      1c1fc5e80fd8b284607cfbaf9b8bf9b0cc58cdb4

    • SHA256

      bd8c4f03932fa0171cf1fbd040d50269c1e3b7c7d84b04975753b3247e4652db

    • SHA512

      637d73485aed793f9bada597a58593d8f5a0a9fbae862e7dea46fc6864c933bd5f84babcc1355d7418c5d147bc10732bb1e6408ad2792ed744011a8775d60f8d

    • SSDEEP

      3072:fb9fR6vPhkm9gDdMM9T4wYkgVGIeuK9RWZBmVPKCuoyH:fb9J6BkDdMMCwYkgwbu2VVPnuoU

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks