Overview

overview

10

Static

static

3

JaffaCakes...d5.exe

windows7-x64

10

JaffaCakes...d5.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_48c5af8114a5aed07fa3a400877132d5

  • Size

    179KB

  • Sample

    250115-at88qawphk

  • MD5

    48c5af8114a5aed07fa3a400877132d5

  • SHA1

    f564562c0a363069fd5684857876d68e19555841

  • SHA256

    4f9d4b811f5c7f7d2ed411dc11d1d8d8f7ddd6a38f678cbda7c08d2b81c85cc0

  • SHA512

    dd7a02cc60ae37e15fa40e88a549dbb7bcd3a08e28708be023a4280484c149c15ae91e3e0344dd582b98cc1b14e44805c2b1850099cd845e98dc3a0b794ff603

  • SSDEEP

    3072:qXj5OufhDwkH8m0Df4v9coDzldEM4Q/GxO/aUm76/CdD0lZnJJDwY:Wj5bfhDp8mQfovPEML0O/C7FKPk

Score
10/10
cycbotbackdoordiscoverypersistenceratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_48c5af8114a5aed07fa3a400877132d5

    • Size

      179KB

    • MD5

      48c5af8114a5aed07fa3a400877132d5

    • SHA1

      f564562c0a363069fd5684857876d68e19555841

    • SHA256

      4f9d4b811f5c7f7d2ed411dc11d1d8d8f7ddd6a38f678cbda7c08d2b81c85cc0

    • SHA512

      dd7a02cc60ae37e15fa40e88a549dbb7bcd3a08e28708be023a4280484c149c15ae91e3e0344dd582b98cc1b14e44805c2b1850099cd845e98dc3a0b794ff603

    • SSDEEP

      3072:qXj5OufhDwkH8m0Df4v9coDzldEM4Q/GxO/aUm76/CdD0lZnJJDwY:Wj5bfhDp8mQfovPEML0O/C7FKPk

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks