Overview

overview

10

Static

static

3

JaffaCakes...f9.exe

windows7-x64

10

JaffaCakes...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ac71b972ca228261e80224b728710bf9

  • Size

    180KB

  • Sample

    250118-rx1jeswjcz

  • MD5

    ac71b972ca228261e80224b728710bf9

  • SHA1

    90a335b7c3d543f2de640a2f7bca59158942d462

  • SHA256

    72f72c3e0f03141457b26f024e563f0c016e71859e457fd453aa9b205c549dc7

  • SHA512

    8461fa2dea50f6007b845be5a33e499274e4e23f7866b5c4ae0339e9d4898a9389ed056767afd2d9db43ec6d2616b1af4f68638678b0b914ef943f16fc3999ac

  • SSDEEP

    3072:WxYD/9ctwl0gYjQFIRW1hl0M6MuA+vhrodZyKaRZnIW5M1ZjLIc4Bz:+acPAIRW1hl0Mpu9vFKYKqIWQjLY

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_ac71b972ca228261e80224b728710bf9

    • Size

      180KB

    • MD5

      ac71b972ca228261e80224b728710bf9

    • SHA1

      90a335b7c3d543f2de640a2f7bca59158942d462

    • SHA256

      72f72c3e0f03141457b26f024e563f0c016e71859e457fd453aa9b205c549dc7

    • SHA512

      8461fa2dea50f6007b845be5a33e499274e4e23f7866b5c4ae0339e9d4898a9389ed056767afd2d9db43ec6d2616b1af4f68638678b0b914ef943f16fc3999ac

    • SSDEEP

      3072:WxYD/9ctwl0gYjQFIRW1hl0M6MuA+vhrodZyKaRZnIW5M1ZjLIc4Bz:+acPAIRW1hl0Mpu9vFKYKqIWQjLY

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks