Overview

overview

10

Static

static

3

JaffaCakes...81.exe

windows7-x64

10

JaffaCakes...81.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_14c30127e0acc9fa6ea8a45eec151781

  • Size

    188KB

  • Sample

    250112-wjz3yssme1

  • MD5

    14c30127e0acc9fa6ea8a45eec151781

  • SHA1

    e45578c2f2337d81897550bd50d6952db6492dab

  • SHA256

    23a764b9c69ce83aacf6ce92f8c878481f0acf02f324a5a01938cce172c994f5

  • SHA512

    9ba77047c0a5b4d486f9d3cc34c3b7148c60412c59c2fb852dd231cd90149143df2f91b853054f8f90e26c16f37ef571bc94fcd40a5bc60710f162c813f5f25b

  • SSDEEP

    3072:bjNiyF5DyhIFYd9rmM4n1XvudI1V+6rdj7xE3GSo3ln+xRf2RKoUY6u//Y7KoO:XNikFyCFYdUM3dIBr5i2Sa5KQAt

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_14c30127e0acc9fa6ea8a45eec151781

    • Size

      188KB

    • MD5

      14c30127e0acc9fa6ea8a45eec151781

    • SHA1

      e45578c2f2337d81897550bd50d6952db6492dab

    • SHA256

      23a764b9c69ce83aacf6ce92f8c878481f0acf02f324a5a01938cce172c994f5

    • SHA512

      9ba77047c0a5b4d486f9d3cc34c3b7148c60412c59c2fb852dd231cd90149143df2f91b853054f8f90e26c16f37ef571bc94fcd40a5bc60710f162c813f5f25b

    • SSDEEP

      3072:bjNiyF5DyhIFYd9rmM4n1XvudI1V+6rdj7xE3GSo3ln+xRf2RKoUY6u//Y7KoO:XNikFyCFYdUM3dIBr5i2Sa5KQAt

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks