Overview

overview

10

Static

static

3

JaffaCakes...d9.exe

windows7-x64

10

JaffaCakes...d9.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4ddf2d32df4ab6e4303bd28da8c448d9

  • Size

    174KB

  • Sample

    250115-fzd8estqdn

  • MD5

    4ddf2d32df4ab6e4303bd28da8c448d9

  • SHA1

    0fcbd43cb666585dfea3dc99fbba1a3b1fdc2199

  • SHA256

    4fa3b1f6272e2ebdac3a1bc74b8073d2359d189a7ab636d5c42a315e313c4354

  • SHA512

    5c72f0d353bbb5d6a7ca5444d8e97fb365efa148f13a12d879f7d0c04b20a1cabaf638d20fa741b6997f9902710677954da333895ac5eefac38ae45ef6327823

  • SSDEEP

    3072:ZVspm8VFP37ODudlEZCQOtBYwJHqB/f4EHZSIwn05ZkPpw5wMDfKsSf:ZKjkuJQO1J03tdrPwMzbSf

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_4ddf2d32df4ab6e4303bd28da8c448d9

    • Size

      174KB

    • MD5

      4ddf2d32df4ab6e4303bd28da8c448d9

    • SHA1

      0fcbd43cb666585dfea3dc99fbba1a3b1fdc2199

    • SHA256

      4fa3b1f6272e2ebdac3a1bc74b8073d2359d189a7ab636d5c42a315e313c4354

    • SHA512

      5c72f0d353bbb5d6a7ca5444d8e97fb365efa148f13a12d879f7d0c04b20a1cabaf638d20fa741b6997f9902710677954da333895ac5eefac38ae45ef6327823

    • SSDEEP

      3072:ZVspm8VFP37ODudlEZCQOtBYwJHqB/f4EHZSIwn05ZkPpw5wMDfKsSf:ZKjkuJQO1J03tdrPwMzbSf

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks