Overview

overview

10

Static

static

3

JaffaCakes...10.exe

windows7-x64

10

JaffaCakes...10.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6877d8ce9130e13096d0626d03fc0f10

  • Size

    176KB

  • Sample

    250102-1wkagszpfp

  • MD5

    6877d8ce9130e13096d0626d03fc0f10

  • SHA1

    13043b5488d398c06439291c3f29930e8637e2e4

  • SHA256

    e1316573f8db5a63dc2b4e00ee807ab87ea56548f2007b1b75890238096f60bf

  • SHA512

    949fd8ddec19b7462a567b1d095463d372b22a004c7f11a47af95af0577af3587104990448766f4220a10279b64eac40328a894a8b78501e8aa999a73027321f

  • SSDEEP

    3072:NY0z6yXJfDu4sThhOrjdxFH5jEMycV2Y7Ow/33iFMMww1+:PzBJIThhWj/jEMn9Ow3

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_6877d8ce9130e13096d0626d03fc0f10

    • Size

      176KB

    • MD5

      6877d8ce9130e13096d0626d03fc0f10

    • SHA1

      13043b5488d398c06439291c3f29930e8637e2e4

    • SHA256

      e1316573f8db5a63dc2b4e00ee807ab87ea56548f2007b1b75890238096f60bf

    • SHA512

      949fd8ddec19b7462a567b1d095463d372b22a004c7f11a47af95af0577af3587104990448766f4220a10279b64eac40328a894a8b78501e8aa999a73027321f

    • SSDEEP

      3072:NY0z6yXJfDu4sThhOrjdxFH5jEMycV2Y7Ow/33iFMMww1+:PzBJIThhWj/jEMn9Ow3

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks