Overview

overview

10

Static

static

3

JaffaCakes...1f.exe

windows7-x64

10

JaffaCakes...1f.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_02b4dfb024e961e4a4c2d42d961e501f

  • Size

    180KB

  • Sample

    250111-3tsvysvpdz

  • MD5

    02b4dfb024e961e4a4c2d42d961e501f

  • SHA1

    d025ec474b16dcda1fd662096d04f5e22df7f21b

  • SHA256

    1c42278ff4e4f0c35e3f48dc156f675f8a7f72f070d0ec4127a44fe6c7403ecc

  • SHA512

    3f1529832929540f89afcacb7f1a78d06f5d9b9f5c2a8969a6b9923e3b806b74f6e3df0b41b35a75c0bff55cf33e221ebcbb7e2de5059f622451f14180ac6fe1

  • SSDEEP

    3072:Su8wT71PDF6T29K9yyecj/s998YhepABvcFYMJKU28N///Hubod3pgp4CzzBop2a:y4rF6T2U7eRDY6RYY0Kv8VHHsoh+mCgB

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_02b4dfb024e961e4a4c2d42d961e501f

    • Size

      180KB

    • MD5

      02b4dfb024e961e4a4c2d42d961e501f

    • SHA1

      d025ec474b16dcda1fd662096d04f5e22df7f21b

    • SHA256

      1c42278ff4e4f0c35e3f48dc156f675f8a7f72f070d0ec4127a44fe6c7403ecc

    • SHA512

      3f1529832929540f89afcacb7f1a78d06f5d9b9f5c2a8969a6b9923e3b806b74f6e3df0b41b35a75c0bff55cf33e221ebcbb7e2de5059f622451f14180ac6fe1

    • SSDEEP

      3072:Su8wT71PDF6T29K9yyecj/s998YhepABvcFYMJKU28N///Hubod3pgp4CzzBop2a:y4rF6T2U7eRDY6RYY0Kv8VHHsoh+mCgB

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks