General
-
Target
JaffaCakes118_500f787662ae7c808173141fe95f4374
-
Size
179KB
-
Sample
250115-ht7nwswqal
-
MD5
500f787662ae7c808173141fe95f4374
-
SHA1
fd2cda3397652461308c1bbe7b9e9c27461ecf45
-
SHA256
7f840b737dc34568f350a71ecc58bcd3356f545cbc2c8cb9af706848ddee7b37
-
SHA512
02b1dde1fd3467dfb5dda8ff3d74f0381fd69d180408923dd80f276369d3fb04d7a4e4dcffed84af43a10a759f94b06dd13a2388dcf06ebee4d047d2a9ad4532
-
SSDEEP
3072:k/NM1R5szd7Uq0/Xd8N//5Wj4so9qdkI6AxYo9G/OBTUFtsdnpVYjP1mdBJb6YJD:kZu3lg5iO9qf6AjFNVMP1yBJWW
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_500f787662ae7c808173141fe95f4374.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_500f787662ae7c808173141fe95f4374.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_500f787662ae7c808173141fe95f4374
-
Size
179KB
-
MD5
500f787662ae7c808173141fe95f4374
-
SHA1
fd2cda3397652461308c1bbe7b9e9c27461ecf45
-
SHA256
7f840b737dc34568f350a71ecc58bcd3356f545cbc2c8cb9af706848ddee7b37
-
SHA512
02b1dde1fd3467dfb5dda8ff3d74f0381fd69d180408923dd80f276369d3fb04d7a4e4dcffed84af43a10a759f94b06dd13a2388dcf06ebee4d047d2a9ad4532
-
SSDEEP
3072:k/NM1R5szd7Uq0/Xd8N//5Wj4so9qdkI6AxYo9G/OBTUFtsdnpVYjP1mdBJb6YJD:kZu3lg5iO9qf6AjFNVMP1yBJWW
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Modifies WinLogon for persistence
-