Overview

overview

10

Static

static

3

JaffaCakes...90.exe

windows7-x64

10

JaffaCakes...90.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_207e60f5944a922ef350cd10b87f3d90

  • Size

    169KB

  • Sample

    250113-ep7ljsvmh1

  • MD5

    207e60f5944a922ef350cd10b87f3d90

  • SHA1

    84b0aec2d8c4a5ac5b689f5b92acefdeae15806e

  • SHA256

    1b4105e70d8bb88355d157cd890326fdc68cde839ced3d32d935789a5ce49c92

  • SHA512

    690c06a2e28e20b2a63c65bbb47c9be0714863134ec93db324e845e45d44f2c4b29273502fdb0d9519f27d03f6df59c2e5d451cdc9f714000e834ab0471d00cd

  • SSDEEP

    3072:CC7hr8gmFmfETEHFJXeJAWh5GZsiGbkEjJ1++t5/a12eehGDtOMw:CO4gemfFJXE5GZu4EVY+H/aoGDt

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_207e60f5944a922ef350cd10b87f3d90

    • Size

      169KB

    • MD5

      207e60f5944a922ef350cd10b87f3d90

    • SHA1

      84b0aec2d8c4a5ac5b689f5b92acefdeae15806e

    • SHA256

      1b4105e70d8bb88355d157cd890326fdc68cde839ced3d32d935789a5ce49c92

    • SHA512

      690c06a2e28e20b2a63c65bbb47c9be0714863134ec93db324e845e45d44f2c4b29273502fdb0d9519f27d03f6df59c2e5d451cdc9f714000e834ab0471d00cd

    • SSDEEP

      3072:CC7hr8gmFmfETEHFJXeJAWh5GZsiGbkEjJ1++t5/a12eehGDtOMw:CO4gemfFJXE5GZu4EVY+H/aoGDt

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks