Resubmissions

12-01-2025 13:03

250112-qawfhswjhp 10

12-01-2025 12:53

250112-p45qlssqft 10

General

  • Target

    JaffaCakes118_0f1338e1991adc7f282be7b9bf1ff834

  • Size

    188KB

  • Sample

    250112-p45qlssqft

  • MD5

    0f1338e1991adc7f282be7b9bf1ff834

  • SHA1

    1f10d0ffbe9ae4e312d7e0b435aeb4a04fd70efc

  • SHA256

    19e9e59ba2f284bc7df20c817e539b04bd76883ea85c7635b5f0bf3b35a2761b

  • SHA512

    792962ab530720226285324a09db8712a41a6dfbd47c0ff28a672f9ff70bd8ca764a3737033f32d809127282a44dcbd58f785fa4b58e2d278d293a45138fe5bf

  • SSDEEP

    3072:bjNiyF5DyhIFYdZrmM4n1XvudI1V+6rdj7xE3GSo3ln+xRf2RKoUY6u//Y7KoO:XNikFyCFYdgM3dIBr5i2Sa5KQAt

Malware Config

Targets

    • Target

      JaffaCakes118_0f1338e1991adc7f282be7b9bf1ff834

    • Size

      188KB

    • MD5

      0f1338e1991adc7f282be7b9bf1ff834

    • SHA1

      1f10d0ffbe9ae4e312d7e0b435aeb4a04fd70efc

    • SHA256

      19e9e59ba2f284bc7df20c817e539b04bd76883ea85c7635b5f0bf3b35a2761b

    • SHA512

      792962ab530720226285324a09db8712a41a6dfbd47c0ff28a672f9ff70bd8ca764a3737033f32d809127282a44dcbd58f785fa4b58e2d278d293a45138fe5bf

    • SSDEEP

      3072:bjNiyF5DyhIFYdZrmM4n1XvudI1V+6rdj7xE3GSo3ln+xRf2RKoUY6u//Y7KoO:XNikFyCFYdgM3dIBr5i2Sa5KQAt

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks