Overview

overview

10

Static

static

3

JaffaCakes...ca.exe

windows7-x64

10

JaffaCakes...ca.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6a8bfda086c859a169d0debd79b94dca

  • Size

    197KB

  • Sample

    250103-gck8ws1pav

  • MD5

    6a8bfda086c859a169d0debd79b94dca

  • SHA1

    bacc9890a0f2b07ddadd4cd28757acd673439eec

  • SHA256

    04e2a1c24c85bc51299397b045611d82c2eb26f9bfc5b10fb68599fa809430df

  • SHA512

    93f830488865a6628d0ab6a09ed981e6c3810901874fb3f2a7aeebfc85f81df2adc9dbbaf42cf611b977d782b494091c1d05595570ae5223783e8533ade29103

  • SSDEEP

    3072:NVoZIGzoQMRKmneS8Z6aiFnAyskdZ+HSIh2xUxje8d8ya4bKnsu:NC/oVRKmneZ6xFnAy5d4yQFxjeVN4bK

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_6a8bfda086c859a169d0debd79b94dca

    • Size

      197KB

    • MD5

      6a8bfda086c859a169d0debd79b94dca

    • SHA1

      bacc9890a0f2b07ddadd4cd28757acd673439eec

    • SHA256

      04e2a1c24c85bc51299397b045611d82c2eb26f9bfc5b10fb68599fa809430df

    • SHA512

      93f830488865a6628d0ab6a09ed981e6c3810901874fb3f2a7aeebfc85f81df2adc9dbbaf42cf611b977d782b494091c1d05595570ae5223783e8533ade29103

    • SSDEEP

      3072:NVoZIGzoQMRKmneS8Z6aiFnAyskdZ+HSIh2xUxje8d8ya4bKnsu:NC/oVRKmneZ6xFnAy5d4yQFxjeVN4bK

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks