Overview

overview

10

Static

static

3

JaffaCakes...0d.exe

windows7-x64

10

JaffaCakes...0d.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1fb59a8994c441c08bf9dbef99325a0d

  • Size

    180KB

  • Sample

    250113-d3lesstmft

  • MD5

    1fb59a8994c441c08bf9dbef99325a0d

  • SHA1

    84cefe0e5b1ed635abcc3b49572b4fd7b7a28b2b

  • SHA256

    7d5426a37bf70bd110f7652288577133592cd5cd1e26fabf83aa321df6521c64

  • SHA512

    b7dfec7f14a4f1790c4d4b5a90c461b18fcc9f06c9836a329f65659d012586f1921936ab97273aca9e62c6c2eb019f2098f71e9a4247a547cb9920c7303d1658

  • SSDEEP

    3072:R4DlgwOy4hsf3hyjNbhGKJ6TOAqOjhM18uI2WupaXgAFFVfvu+bAZFAzpYlgFDal:ylgry4avCP6u1vI2TmvVfvSZFAtYiDo

Score
10/10
cycbotbackdoordiscoverypersistenceratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_1fb59a8994c441c08bf9dbef99325a0d

    • Size

      180KB

    • MD5

      1fb59a8994c441c08bf9dbef99325a0d

    • SHA1

      84cefe0e5b1ed635abcc3b49572b4fd7b7a28b2b

    • SHA256

      7d5426a37bf70bd110f7652288577133592cd5cd1e26fabf83aa321df6521c64

    • SHA512

      b7dfec7f14a4f1790c4d4b5a90c461b18fcc9f06c9836a329f65659d012586f1921936ab97273aca9e62c6c2eb019f2098f71e9a4247a547cb9920c7303d1658

    • SSDEEP

      3072:R4DlgwOy4hsf3hyjNbhGKJ6TOAqOjhM18uI2WupaXgAFFVfvu+bAZFAzpYlgFDal:ylgry4avCP6u1vI2TmvVfvSZFAtYiDo

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks