Overview

overview

10

Static

static

3

JaffaCakes...86.exe

windows7-x64

10

JaffaCakes...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_17697460f42f0f2917d33641755d8b86

  • Size

    179KB

  • Sample

    250112-y3jlesznfr

  • MD5

    17697460f42f0f2917d33641755d8b86

  • SHA1

    a40339fe7504c246c4a4f0315b5913cebc79d7ac

  • SHA256

    27bd9e1db8e910a64403c6dd98e218670ae43a20291e499f757edc568bbaca82

  • SHA512

    7e70cf2efb72d9e274677ed29a7e156fb968a836f9fbe446f9ee934664cd46e02730c848ed92a4d5dce54a0427e53d222bd100035d0fb4aa8c5b945ec36cdd6d

  • SSDEEP

    3072:M1OS7e7LDSy/8ppC9zgAiaXS77PrCDLdyL+r1oZNPy:MES7PRppch7iCDEL+eZZ

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_17697460f42f0f2917d33641755d8b86

    • Size

      179KB

    • MD5

      17697460f42f0f2917d33641755d8b86

    • SHA1

      a40339fe7504c246c4a4f0315b5913cebc79d7ac

    • SHA256

      27bd9e1db8e910a64403c6dd98e218670ae43a20291e499f757edc568bbaca82

    • SHA512

      7e70cf2efb72d9e274677ed29a7e156fb968a836f9fbe446f9ee934664cd46e02730c848ed92a4d5dce54a0427e53d222bd100035d0fb4aa8c5b945ec36cdd6d

    • SSDEEP

      3072:M1OS7e7LDSy/8ppC9zgAiaXS77PrCDLdyL+r1oZNPy:MES7PRppch7iCDEL+eZZ

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks