General
-
Target
JaffaCakes118_09f0b3a451ae967a9f7001f333e61775
-
Size
174KB
-
Sample
250112-kh45qsvlg1
-
MD5
09f0b3a451ae967a9f7001f333e61775
-
SHA1
72ad8b7f2d1d3abb2e8d27c7614eabaeadae5779
-
SHA256
1d9011525891ae7b3d4d93fefece72e4db3d472dd479d95a896f04a355faeff3
-
SHA512
b450fe590695097944944a46e2d11bebbcd4404b827205b8e7bdb0107d3fd9b7570de83205975d56491559a4883d63446947a522e0bcf383b954a122e4ddcaf4
-
SSDEEP
3072:fW0ZO/QFNGawwTXMdqC/XdV1fqc1MxfGZnC4FABexVQZ1s9/cbU:fW0ZpFE9UXKDLi+NCsViu9/u
Malware Config
Targets
-
-
Target
JaffaCakes118_09f0b3a451ae967a9f7001f333e61775
-
Size
174KB
-
MD5
09f0b3a451ae967a9f7001f333e61775
-
SHA1
72ad8b7f2d1d3abb2e8d27c7614eabaeadae5779
-
SHA256
1d9011525891ae7b3d4d93fefece72e4db3d472dd479d95a896f04a355faeff3
-
SHA512
b450fe590695097944944a46e2d11bebbcd4404b827205b8e7bdb0107d3fd9b7570de83205975d56491559a4883d63446947a522e0bcf383b954a122e4ddcaf4
-
SSDEEP
3072:fW0ZO/QFNGawwTXMdqC/XdV1fqc1MxfGZnC4FABexVQZ1s9/cbU:fW0ZpFE9UXKDLi+NCsViu9/u
Score10/10-
Cycbot
Cycbot is a backdoor and trojan written in C++..
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Modifies WinLogon for persistence
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-