Overview

overview

10

Static

static

3

JaffaCakes...e0.exe

windows7-x64

10

JaffaCakes...e0.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5e81177fead0c1d8b855d57a9e441be0

  • Size

    171KB

  • Sample

    250115-wwcs7askfj

  • MD5

    5e81177fead0c1d8b855d57a9e441be0

  • SHA1

    5689f68986eb93626ad0637c65ef9db4fc43c4c0

  • SHA256

    7a39cd096b4e189d54490ce4b17bf4e3df2efe457044f89c153ea2500cf27b5e

  • SHA512

    9b26973e60a65c731a89960f9c32a12629b9a32c027740c5303402a8bf31e87f0206cad6c64ed4450aa7ed9b2bfb147633ff909d843a6c2db46928c1e3997f7d

  • SSDEEP

    3072:KUI2cse6JTo2nZ01XUejpUYIuNNoNBlUDQ4sWIoZhxN3dq1IwsTpkJ+RAA2ht3:Kndse6VnA55I9UUJhoZhxpLwsT2J+Svz

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_5e81177fead0c1d8b855d57a9e441be0

    • Size

      171KB

    • MD5

      5e81177fead0c1d8b855d57a9e441be0

    • SHA1

      5689f68986eb93626ad0637c65ef9db4fc43c4c0

    • SHA256

      7a39cd096b4e189d54490ce4b17bf4e3df2efe457044f89c153ea2500cf27b5e

    • SHA512

      9b26973e60a65c731a89960f9c32a12629b9a32c027740c5303402a8bf31e87f0206cad6c64ed4450aa7ed9b2bfb147633ff909d843a6c2db46928c1e3997f7d

    • SSDEEP

      3072:KUI2cse6JTo2nZ01XUejpUYIuNNoNBlUDQ4sWIoZhxN3dq1IwsTpkJ+RAA2ht3:Kndse6VnA55I9UUJhoZhxpLwsT2J+Svz

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks