Overview

overview

10

Static

static

3

JaffaCakes...a4.exe

windows7-x64

10

JaffaCakes...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7dc18ea3968011baae13911dbfdbc7a4

  • Size

    192KB

  • Sample

    250116-we22ra1raz

  • MD5

    7dc18ea3968011baae13911dbfdbc7a4

  • SHA1

    c40f3ee72d6439a5aea08624b24d8b5d8113a26c

  • SHA256

    6511c7451d8c45ad25111e6488bdf7d2ce0f0d91d5d37dbee82a16e738e3b04d

  • SHA512

    06b3a2239cbf9eff0399d600c16980012396075e136e3b2548b9fadc4c89d2eb2800b34a7b6f581a310d8590a199117f5ac6d4ee7144a5a8940db253ab6877a0

  • SSDEEP

    6144:m3EJLSL/1FuwlymAZc+Jv7FIq4NxevIanpYXQl:YEJLQ/1wo/qrgxevIanpJ

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_7dc18ea3968011baae13911dbfdbc7a4

    • Size

      192KB

    • MD5

      7dc18ea3968011baae13911dbfdbc7a4

    • SHA1

      c40f3ee72d6439a5aea08624b24d8b5d8113a26c

    • SHA256

      6511c7451d8c45ad25111e6488bdf7d2ce0f0d91d5d37dbee82a16e738e3b04d

    • SHA512

      06b3a2239cbf9eff0399d600c16980012396075e136e3b2548b9fadc4c89d2eb2800b34a7b6f581a310d8590a199117f5ac6d4ee7144a5a8940db253ab6877a0

    • SSDEEP

      6144:m3EJLSL/1FuwlymAZc+Jv7FIq4NxevIanpYXQl:YEJLQ/1wo/qrgxevIanpJ

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks