Overview

overview

10

Static

static

3

JaffaCakes...b9.exe

windows7-x64

10

JaffaCakes...b9.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_86abbbb041705b10eae29847863b4bb9

  • Size

    447KB

  • Sample

    250117-kn9x6szncr

  • MD5

    86abbbb041705b10eae29847863b4bb9

  • SHA1

    b486472727159b4b2e920ac4269ef8fb1820649f

  • SHA256

    ae1d95a507838ce26e8ab287f49ec5560c62a58ae00a55e4a958e90755665aa8

  • SHA512

    c23110415e0f7b51290a2e4f427cbfffa8843bea55f627449957757ca88a7e837ec1c3b052fdc29de45449d16c68c6307851210db7f6400d4963a014d11e8195

  • SSDEEP

    6144:JXaNWe6U4ldY5wmhpSbu6khziIxpj/QVKJcPZkZP26aq4LD3u2QXtV4cXP+Lum34:JXdYydbuljLQVycxW4LD37QdV4vu1

Score
10/10
cybergatediscoverypersistencestealertrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_86abbbb041705b10eae29847863b4bb9

    • Size

      447KB

    • MD5

      86abbbb041705b10eae29847863b4bb9

    • SHA1

      b486472727159b4b2e920ac4269ef8fb1820649f

    • SHA256

      ae1d95a507838ce26e8ab287f49ec5560c62a58ae00a55e4a958e90755665aa8

    • SHA512

      c23110415e0f7b51290a2e4f427cbfffa8843bea55f627449957757ca88a7e837ec1c3b052fdc29de45449d16c68c6307851210db7f6400d4963a014d11e8195

    • SSDEEP

      6144:JXaNWe6U4ldY5wmhpSbu6khziIxpj/QVKJcPZkZP26aq4LD3u2QXtV4cXP+Lum34:JXdYydbuljLQVycxW4LD37QdV4vu1

    Score
    10/10
    cybergatediscoverypersistencestealertrojanupx

    • CyberGate, Rebhip

      CyberGate is a lightweight remote administration tool with a wide array of functionalities.

      trojanstealercybergate

    • Cybergate family

      cybergate

    • Adds policy Run key to start application

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks