Overview

overview

10

Static

static

3

JaffaCakes...4e.exe

windows7-x64

10

JaffaCakes...4e.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6ee43bf19bf95f3ab11b196d341d824e

  • Size

    201KB

  • Sample

    250116-h11txsylav

  • MD5

    6ee43bf19bf95f3ab11b196d341d824e

  • SHA1

    25517c9d7beebc4be4fdb4f5061c9bb4bb3f0daa

  • SHA256

    4c1c55cdaf838fa132a2e315038c6e5327b7afc6f331ec167e0c8d66ee2292a4

  • SHA512

    eea92b73e108de4e136ad594d04ba8543cbe7742f22c2a7a7b4c7216bb2b48fc61b1b888d9fa9f996e3469c9b86f67ac9716f44faf161b9eda077411ba3b26d0

  • SSDEEP

    3072:+959g9iOTU74GAwAorHDHSFXKY1CGLgRUnwxRYqj+hCoz3rTZlc0cXRfnzg:MgTTU74GAwAWHIaY0SW0hCoz3bRg0

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_6ee43bf19bf95f3ab11b196d341d824e

    • Size

      201KB

    • MD5

      6ee43bf19bf95f3ab11b196d341d824e

    • SHA1

      25517c9d7beebc4be4fdb4f5061c9bb4bb3f0daa

    • SHA256

      4c1c55cdaf838fa132a2e315038c6e5327b7afc6f331ec167e0c8d66ee2292a4

    • SHA512

      eea92b73e108de4e136ad594d04ba8543cbe7742f22c2a7a7b4c7216bb2b48fc61b1b888d9fa9f996e3469c9b86f67ac9716f44faf161b9eda077411ba3b26d0

    • SSDEEP

      3072:+959g9iOTU74GAwAorHDHSFXKY1CGLgRUnwxRYqj+hCoz3rTZlc0cXRfnzg:MgTTU74GAwAWHIaY0SW0hCoz3bRg0

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks