Overview

overview

10

Static

static

3

JaffaCakes...f8.exe

windows7-x64

10

JaffaCakes...f8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_02253b4f65f49dcf9cece0f2ce858ff8

  • Size

    180KB

  • Sample

    250111-29ahwatqew

  • MD5

    02253b4f65f49dcf9cece0f2ce858ff8

  • SHA1

    f899e34d98fddeaa05b31dcf881a75a17c4cfe53

  • SHA256

    28a38218bffc67455d0b132d26ef751b7d239be9093ccf1f527fa5e8a3d2a01f

  • SHA512

    15b5a32fc0d2191ceb2e26813b2b1e06d44ab3554648c7afd138633998f375f17bdeb57331462a11b27e0fd0bc1d14dab179aedb5965270ca363203bb7a315cf

  • SSDEEP

    3072:Z1oALN8ojjJZqEqw9Ia4OffcxCFk9Mmf4S98iygDZe6BxA9ZR9nU2iqPchllzF3E:ZdN8ojSEqwimkCFkS0198EVeqxAnULyN

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_02253b4f65f49dcf9cece0f2ce858ff8

    • Size

      180KB

    • MD5

      02253b4f65f49dcf9cece0f2ce858ff8

    • SHA1

      f899e34d98fddeaa05b31dcf881a75a17c4cfe53

    • SHA256

      28a38218bffc67455d0b132d26ef751b7d239be9093ccf1f527fa5e8a3d2a01f

    • SHA512

      15b5a32fc0d2191ceb2e26813b2b1e06d44ab3554648c7afd138633998f375f17bdeb57331462a11b27e0fd0bc1d14dab179aedb5965270ca363203bb7a315cf

    • SSDEEP

      3072:Z1oALN8ojjJZqEqw9Ia4OffcxCFk9Mmf4S98iygDZe6BxA9ZR9nU2iqPchllzF3E:ZdN8ojSEqwimkCFkS0198EVeqxAnULyN

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks