Overview

overview

10

Static

static

3

JaffaCakes...c7.exe

windows7-x64

10

JaffaCakes...c7.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_aef0b9880763e42c75bb7bb061ea08c7

  • Size

    188KB

  • Sample

    250118-t2756syqhn

  • MD5

    aef0b9880763e42c75bb7bb061ea08c7

  • SHA1

    08148b0904a473c5b612f1cf9eca9d52a007dcae

  • SHA256

    4c9d6582a7fdf26f3a3416536d958b28a3c288fd141a8689f567a06e7413132c

  • SHA512

    9463850f9fed671564e86ce3f3d3cc6bc9cd7b0f60f9455675c67b1f0fa36b3ed67daa2a3d1f9a9088897b1da69c3777fc5436ace36512fcb5c327148dd8558c

  • SSDEEP

    3072:C7+mP819ZwfMQSgpDmZjSf1PbbbKB2t98F/aLqQFDxqiCJYq6BKXzAuWc2XSbQc0:Lmk19EfFmZOtbbKBlaLqsDoH15XzdLTQ

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_aef0b9880763e42c75bb7bb061ea08c7

    • Size

      188KB

    • MD5

      aef0b9880763e42c75bb7bb061ea08c7

    • SHA1

      08148b0904a473c5b612f1cf9eca9d52a007dcae

    • SHA256

      4c9d6582a7fdf26f3a3416536d958b28a3c288fd141a8689f567a06e7413132c

    • SHA512

      9463850f9fed671564e86ce3f3d3cc6bc9cd7b0f60f9455675c67b1f0fa36b3ed67daa2a3d1f9a9088897b1da69c3777fc5436ace36512fcb5c327148dd8558c

    • SSDEEP

      3072:C7+mP819ZwfMQSgpDmZjSf1PbbbKB2t98F/aLqQFDxqiCJYq6BKXzAuWc2XSbQc0:Lmk19EfFmZOtbbKBlaLqsDoH15XzdLTQ

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks