General
-
Target
JaffaCakes118_bfbae6e4f9471a56861ee583ebbf41e4
-
Size
168KB
-
Sample
250119-g3bgdaypgq
-
MD5
bfbae6e4f9471a56861ee583ebbf41e4
-
SHA1
7f7963f4db6b16c508264f68e8f318b1b5927506
-
SHA256
4e9a85a50de1c4d5a8cee8e5aebbc451971cb3558222cc1f5aa66691a656ea69
-
SHA512
7806a8a755af678fffa6ebd1e872902b246e5c1cd5b7b6d1c7a9f7dd997d7412d34c3d655d251388302fc96fa66533d9001f45719460a18c7357d015925c1a6c
-
SSDEEP
3072:LCnlARdtmxC06aYl+5ir6Vl0Cs8IJJ1CMPI3Y6XkY6x/pH7:OebmxCpB+5ir6QOIJJ1CMPI3ZXk5xBH7
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_bfbae6e4f9471a56861ee583ebbf41e4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_bfbae6e4f9471a56861ee583ebbf41e4.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_bfbae6e4f9471a56861ee583ebbf41e4
-
Size
168KB
-
MD5
bfbae6e4f9471a56861ee583ebbf41e4
-
SHA1
7f7963f4db6b16c508264f68e8f318b1b5927506
-
SHA256
4e9a85a50de1c4d5a8cee8e5aebbc451971cb3558222cc1f5aa66691a656ea69
-
SHA512
7806a8a755af678fffa6ebd1e872902b246e5c1cd5b7b6d1c7a9f7dd997d7412d34c3d655d251388302fc96fa66533d9001f45719460a18c7357d015925c1a6c
-
SSDEEP
3072:LCnlARdtmxC06aYl+5ir6Vl0Cs8IJJ1CMPI3Y6XkY6x/pH7:OebmxCpB+5ir6QOIJJ1CMPI3ZXk5xBH7
-
Cycbot family
-
Detects Cycbot payload
Cycbot is a backdoor and trojan written in C++.
-
Modifies WinLogon for persistence
-