Overview

overview

10

Static

static

3

faa674f85e...18.exe

windows7-x64

10

faa674f85e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    faa674f85eb7b8fa5f4817e573bb2a37_JaffaCakes118

  • Size

    180KB

  • Sample

    241218-je45ws1lbm

  • MD5

    faa674f85eb7b8fa5f4817e573bb2a37

  • SHA1

    450c95f84b88f89c01efad5ca3ed9a8706eecd6d

  • SHA256

    6be102ea5e555ee5ca772def01180a8d52648c8a73f0b4389cdcd88974a5e756

  • SHA512

    7312e4fc833b4013aa5c2b0e19d0f185d2b35f5d3c7b7b318d9a5a77e38b8175c59536af93c783674587ba30cbc526f64e8aa0d1f310dcf99e41ee88c792e984

  • SSDEEP

    3072:9KlVa/TUW+W/kn7JiCHJ/IAiTq6k6h/Q3xAV2Do2lILEICeXUewhsS7aS2:ewTwiMJ/IAiZUx22mCEPysS7af

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      faa674f85eb7b8fa5f4817e573bb2a37_JaffaCakes118

    • Size

      180KB

    • MD5

      faa674f85eb7b8fa5f4817e573bb2a37

    • SHA1

      450c95f84b88f89c01efad5ca3ed9a8706eecd6d

    • SHA256

      6be102ea5e555ee5ca772def01180a8d52648c8a73f0b4389cdcd88974a5e756

    • SHA512

      7312e4fc833b4013aa5c2b0e19d0f185d2b35f5d3c7b7b318d9a5a77e38b8175c59536af93c783674587ba30cbc526f64e8aa0d1f310dcf99e41ee88c792e984

    • SSDEEP

      3072:9KlVa/TUW+W/kn7JiCHJ/IAiTq6k6h/Q3xAV2Do2lILEICeXUewhsS7aS2:ewTwiMJ/IAiZUx22mCEPysS7af

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks