Overview

overview

10

Static

static

3

JaffaCakes...95.exe

windows7-x64

10

JaffaCakes...95.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a3a5b5e22be71911aefdd1970fc0ca95

  • Size

    179KB

  • Sample

    250118-jf3y8axjgw

  • MD5

    a3a5b5e22be71911aefdd1970fc0ca95

  • SHA1

    a95e14ffe39862f55f94fce22ec9ba947be0d918

  • SHA256

    15a04280442257b5f642d0a725647556e2445f021e2c247d9450205d979b203a

  • SHA512

    5baa0d90324f3386f98cc884f295854fc04d0e1a739855e6e47626e11aaedca0584c36e68dc7ab6f9b8a368111293a461c80199b4140661124219a70a3b49187

  • SSDEEP

    3072:wFJEaw3SmCBHCLwawe4UMhqmpaEy/2I+EM0nKEpccKSFVQHeh4RU9:wFJElC3HMuEb/r3M0n7uyFSYR

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_a3a5b5e22be71911aefdd1970fc0ca95

    • Size

      179KB

    • MD5

      a3a5b5e22be71911aefdd1970fc0ca95

    • SHA1

      a95e14ffe39862f55f94fce22ec9ba947be0d918

    • SHA256

      15a04280442257b5f642d0a725647556e2445f021e2c247d9450205d979b203a

    • SHA512

      5baa0d90324f3386f98cc884f295854fc04d0e1a739855e6e47626e11aaedca0584c36e68dc7ab6f9b8a368111293a461c80199b4140661124219a70a3b49187

    • SSDEEP

      3072:wFJEaw3SmCBHCLwawe4UMhqmpaEy/2I+EM0nKEpccKSFVQHeh4RU9:wFJElC3HMuEb/r3M0n7uyFSYR

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks