Overview

overview

10

Static

static

3

JaffaCakes...6c.exe

windows7-x64

10

JaffaCakes...6c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6a409442ed9d7cac7a62cc4008e1b96c

  • Size

    182KB

  • Sample

    250116-ehxg1a1jay

  • MD5

    6a409442ed9d7cac7a62cc4008e1b96c

  • SHA1

    3e56f19450587c4e0ff0a40253821509a8c005e6

  • SHA256

    4c3ce8ccf974b1f26fe88ea11baeacfafd3bedb308045cc029c59fe594dd2171

  • SHA512

    d02abaaa292378d105958c67dce5f96357f8215d8f2a732f799dd4ad1019531e413272fc2d1bb27447e8f056d90ec5858ad4d41852eb48971aacf7fea2eb063e

  • SSDEEP

    3072:pZ9kn7uk4bxzpQDyiJHp6gq6/ButZzT9C9UlzEyYqODI1VnH97oG+axt:pPDhbuHAl+Bur9CiuqO057oQ

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_6a409442ed9d7cac7a62cc4008e1b96c

    • Size

      182KB

    • MD5

      6a409442ed9d7cac7a62cc4008e1b96c

    • SHA1

      3e56f19450587c4e0ff0a40253821509a8c005e6

    • SHA256

      4c3ce8ccf974b1f26fe88ea11baeacfafd3bedb308045cc029c59fe594dd2171

    • SHA512

      d02abaaa292378d105958c67dce5f96357f8215d8f2a732f799dd4ad1019531e413272fc2d1bb27447e8f056d90ec5858ad4d41852eb48971aacf7fea2eb063e

    • SSDEEP

      3072:pZ9kn7uk4bxzpQDyiJHp6gq6/ButZzT9C9UlzEyYqODI1VnH97oG+axt:pPDhbuHAl+Bur9CiuqO057oQ

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks