Overview

overview

10

Static

static

3

JaffaCakes...ca.exe

windows7-x64

10

JaffaCakes...ca.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_aaef7fd20c151a51263286b2fbcdabca

  • Size

    195KB

  • Sample

    250118-qmtgpatrcv

  • MD5

    aaef7fd20c151a51263286b2fbcdabca

  • SHA1

    2b9ff1fb63f440d02fe4d572ce9c1eb7a3c17ce1

  • SHA256

    2f17bb1742217a5bc0fe0d89044c4241f382bc56c2995fa319f94a08798afcd9

  • SHA512

    93ce7971dd68f5e4c7eb0f745daa559c409f2f3e0b8bf9e30e808d334f19ef2dad0707ef7443d93f9263cd7743cfcf1e334400366e5420602cdf725c95ddbf5e

  • SSDEEP

    3072:EUVfW7yjVxXgXC3Xhq8OgbX2++2gX3mchQneB9FjycwO65uky3yJqdRh0e+9lpcj:ET+XgYXhq8OgTt+bn5vPFPk2dftwj

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_aaef7fd20c151a51263286b2fbcdabca

    • Size

      195KB

    • MD5

      aaef7fd20c151a51263286b2fbcdabca

    • SHA1

      2b9ff1fb63f440d02fe4d572ce9c1eb7a3c17ce1

    • SHA256

      2f17bb1742217a5bc0fe0d89044c4241f382bc56c2995fa319f94a08798afcd9

    • SHA512

      93ce7971dd68f5e4c7eb0f745daa559c409f2f3e0b8bf9e30e808d334f19ef2dad0707ef7443d93f9263cd7743cfcf1e334400366e5420602cdf725c95ddbf5e

    • SSDEEP

      3072:EUVfW7yjVxXgXC3Xhq8OgbX2++2gX3mchQneB9FjycwO65uky3yJqdRh0e+9lpcj:ET+XgYXhq8OgTt+bn5vPFPk2dftwj

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks