Overview

overview

10

Static

static

3

fd61314ebe...18.exe

windows7-x64

10

fd61314ebe...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd61314ebe34845ef4c0b376e1436396_JaffaCakes118

  • Size

    189KB

  • Sample

    241218-2gjabavles

  • MD5

    fd61314ebe34845ef4c0b376e1436396

  • SHA1

    d601bb3786ab95a237447efb7f45274383475cd0

  • SHA256

    1ec773d463b338b66eb013c4bd1391b007326140897712d7e785df2530acc2c5

  • SHA512

    47826ea633b52055daec61b4516934f9e284ac6e324f18468a94f34de3fbae2ccd660538efc78b4f1bce6e406ee16b71d2ecc3bf5535e775754340a2d4079510

  • SSDEEP

    3072:hJSl1ILq79YgHnp5Q3TQzPV/vnhs/Mv06Uw/JuhgBLII62FyUj1yc0XZ5V7Mylnb:hol1Yq7egJ2MzN/veIfp/YhgB1yUjUc+

Score
10/10
cycbotbackdoordiscoverypersistenceratspywarestealerupx

Malware Config

Targets

    • Target

      fd61314ebe34845ef4c0b376e1436396_JaffaCakes118

    • Size

      189KB

    • MD5

      fd61314ebe34845ef4c0b376e1436396

    • SHA1

      d601bb3786ab95a237447efb7f45274383475cd0

    • SHA256

      1ec773d463b338b66eb013c4bd1391b007326140897712d7e785df2530acc2c5

    • SHA512

      47826ea633b52055daec61b4516934f9e284ac6e324f18468a94f34de3fbae2ccd660538efc78b4f1bce6e406ee16b71d2ecc3bf5535e775754340a2d4079510

    • SSDEEP

      3072:hJSl1ILq79YgHnp5Q3TQzPV/vnhs/Mv06Uw/JuhgBLII62FyUj1yc0XZ5V7Mylnb:hol1Yq7egJ2MzN/veIfp/YhgB1yUjUc+

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks