Overview

overview

10

Static

static

3

JaffaCakes...26.exe

windows7-x64

10

JaffaCakes...26.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_73b5f3d1d62035df6a6ce6e019fde726

  • Size

    184KB

  • Sample

    250116-mmcmdsxlhr

  • MD5

    73b5f3d1d62035df6a6ce6e019fde726

  • SHA1

    d6650d61877e51cb5e3fd080960a17e068c578e0

  • SHA256

    19e2bae08d547849782f25e89992c03c39d8d0b0e2c310a5ea741b410c2a1120

  • SHA512

    671839cbcf892b0aa19c6a2eab6576b2372ab0cc20650aba86ad857ff0f8054fceffa9891abdfbd0313a23f77cc7f00ce3a18f0a803981b4a0a1d5ab21c93c94

  • SSDEEP

    3072:GdP0a1jUBuWgxNtvfKlUiUZtR7x0nWZnEHBGPNqKzdjkinashk/QQfRJ149G8rY4:YYNgBt16nWZn6uNqmdvk/JRJW9tY4

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_73b5f3d1d62035df6a6ce6e019fde726

    • Size

      184KB

    • MD5

      73b5f3d1d62035df6a6ce6e019fde726

    • SHA1

      d6650d61877e51cb5e3fd080960a17e068c578e0

    • SHA256

      19e2bae08d547849782f25e89992c03c39d8d0b0e2c310a5ea741b410c2a1120

    • SHA512

      671839cbcf892b0aa19c6a2eab6576b2372ab0cc20650aba86ad857ff0f8054fceffa9891abdfbd0313a23f77cc7f00ce3a18f0a803981b4a0a1d5ab21c93c94

    • SSDEEP

      3072:GdP0a1jUBuWgxNtvfKlUiUZtR7x0nWZnEHBGPNqKzdjkinashk/QQfRJ149G8rY4:YYNgBt16nWZn6uNqmdvk/JRJW9tY4

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks