General

  • Target

    VirusShare_0103567aa562f419b8f7f710a18454bf

  • Size

    182KB

  • Sample

    250111-1q6xas1mgx

  • MD5

    0103567aa562f419b8f7f710a18454bf

  • SHA1

    0e92b28d62700fedf89d9d809b41be33cedaed64

  • SHA256

    4bfeff9bba0c096697641a0bef4e3dfd808b37cf48ec5954ddc9aeaea835e140

  • SHA512

    8c2c6219b6ff2f756a0a4e2360cc1e5963000389f6b237a0c15121f46daeba1530d4af68f2ae1beaf466e2bf843734895f04bc65df510d2f80d22e115ebbb49a

  • SSDEEP

    3072:mUhoj8I2cE/yB4wt1Kmq3h1QyYhR6UJ4XW8HZxTdDEzoKfdWqnZFhqN4Otgm34:mUqgI2cE/yf3gwyYhR6UJ4m8HRPEdWqY

Malware Config

Targets

    • Target

      VirusShare_0103567aa562f419b8f7f710a18454bf

    • Size

      182KB

    • MD5

      0103567aa562f419b8f7f710a18454bf

    • SHA1

      0e92b28d62700fedf89d9d809b41be33cedaed64

    • SHA256

      4bfeff9bba0c096697641a0bef4e3dfd808b37cf48ec5954ddc9aeaea835e140

    • SHA512

      8c2c6219b6ff2f756a0a4e2360cc1e5963000389f6b237a0c15121f46daeba1530d4af68f2ae1beaf466e2bf843734895f04bc65df510d2f80d22e115ebbb49a

    • SSDEEP

      3072:mUhoj8I2cE/yB4wt1Kmq3h1QyYhR6UJ4XW8HZxTdDEzoKfdWqnZFhqN4Otgm34:mUqgI2cE/yf3gwyYhR6UJ4m8HRPEdWqY

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks