Overview

overview

10

Static

static

3

fb5796499b...18.exe

windows7-x64

10

fb5796499b...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb5796499b1c723e3caead8b24b70cbd_JaffaCakes118

  • Size

    182KB

  • Sample

    241218-ngb94sxqgp

  • MD5

    fb5796499b1c723e3caead8b24b70cbd

  • SHA1

    09ac2ad13de31671ca76919cf77381081e1c6adb

  • SHA256

    b21d50173ba7168e8d034c92dd318fcef281b9780b7f4413077166a8e68098d2

  • SHA512

    0c91a8f707aaac735773a606569b0b5ab590c21b3404826d6c92aff47679b877a44019da73e23abf1de7be47bbe6e923e1440172d941a532d78e930626836382

  • SSDEEP

    3072:/ZPv0fuWnVXboLY01H/UEznTnezl3UGdOdoAewWBASCTUPG9sF5csMEOvJJ:/9VCkY0J0ladxSqA2sMEI

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      fb5796499b1c723e3caead8b24b70cbd_JaffaCakes118

    • Size

      182KB

    • MD5

      fb5796499b1c723e3caead8b24b70cbd

    • SHA1

      09ac2ad13de31671ca76919cf77381081e1c6adb

    • SHA256

      b21d50173ba7168e8d034c92dd318fcef281b9780b7f4413077166a8e68098d2

    • SHA512

      0c91a8f707aaac735773a606569b0b5ab590c21b3404826d6c92aff47679b877a44019da73e23abf1de7be47bbe6e923e1440172d941a532d78e930626836382

    • SSDEEP

      3072:/ZPv0fuWnVXboLY01H/UEznTnezl3UGdOdoAewWBASCTUPG9sF5csMEOvJJ:/9VCkY0J0ladxSqA2sMEI

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks