Overview

overview

10

Static

static

3

JaffaCakes...8c.exe

windows7-x64

10

JaffaCakes...8c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8ac81173118d243b7fb270429545348c

  • Size

    189KB

  • Sample

    250117-nz5z5swrhj

  • MD5

    8ac81173118d243b7fb270429545348c

  • SHA1

    2a26665a81b271763ea9b23b8f04ab58d15df80b

  • SHA256

    18f114603640083121c1f148744e27c0d0c0af9cd25146a2b56c097df80a4998

  • SHA512

    fa1f445dac04fe349fe4fee72c99a05b7450a8e8e864f1811534ab9a40a48d8fb7a90542d8ea2cce394917ba76e8daf7fb88f543512ff1ecee2fd6b028ddd02f

  • SSDEEP

    3072:+PuigBQ8TTwN0vQGzaKRK0hAgEgmcUSkYY2ywzO/ewgUb3pARVWP:+PVgTTTLvQuh8CzTLymOG6ybe

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_8ac81173118d243b7fb270429545348c

    • Size

      189KB

    • MD5

      8ac81173118d243b7fb270429545348c

    • SHA1

      2a26665a81b271763ea9b23b8f04ab58d15df80b

    • SHA256

      18f114603640083121c1f148744e27c0d0c0af9cd25146a2b56c097df80a4998

    • SHA512

      fa1f445dac04fe349fe4fee72c99a05b7450a8e8e864f1811534ab9a40a48d8fb7a90542d8ea2cce394917ba76e8daf7fb88f543512ff1ecee2fd6b028ddd02f

    • SSDEEP

      3072:+PuigBQ8TTwN0vQGzaKRK0hAgEgmcUSkYY2ywzO/ewgUb3pARVWP:+PVgTTTLvQuh8CzTLymOG6ybe

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks