Overview

overview

10

Static

static

3

ff56b9d518...18.exe

windows7-x64

10

ff56b9d518...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff56b9d51829fd933cb9e55617bebb28_JaffaCakes118

  • Size

    193KB

  • Sample

    241219-lj1pdaynfz

  • MD5

    ff56b9d51829fd933cb9e55617bebb28

  • SHA1

    0ed03074fb00cf2103fce9217b80e9ff88775188

  • SHA256

    bcfaae978a9bf55798bede10ba7851277f38fd7660f2acb6d89f201ab62fa058

  • SHA512

    025eba343abfba9cdf7545f5303d25a72804eb06a5473f3758e8d27c981fa4e97d920742e2327056a887976444b15153498bfb4e1cd99ff85b8f6db52bc99b09

  • SSDEEP

    6144:IP/SZjPMMy1PdI5kyGil/dd972ZnzolY:I2jzga5GGvY8lY

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      ff56b9d51829fd933cb9e55617bebb28_JaffaCakes118

    • Size

      193KB

    • MD5

      ff56b9d51829fd933cb9e55617bebb28

    • SHA1

      0ed03074fb00cf2103fce9217b80e9ff88775188

    • SHA256

      bcfaae978a9bf55798bede10ba7851277f38fd7660f2acb6d89f201ab62fa058

    • SHA512

      025eba343abfba9cdf7545f5303d25a72804eb06a5473f3758e8d27c981fa4e97d920742e2327056a887976444b15153498bfb4e1cd99ff85b8f6db52bc99b09

    • SSDEEP

      6144:IP/SZjPMMy1PdI5kyGil/dd972ZnzolY:I2jzga5GGvY8lY

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks