General

  • Target

    JaffaCakes118_c8b78a0401f5ae133f7f8cd0ea85d759

  • Size

    193KB

  • Sample

    250119-qehp8azjdp

  • MD5

    c8b78a0401f5ae133f7f8cd0ea85d759

  • SHA1

    8324995e6f46fef33fc5b651cb742322d4a7f715

  • SHA256

    7c9081466a89fb08ddbe6b12972b669219c4d30551ced84212a092c44480aabd

  • SHA512

    9e5376a3e722908cfe1104eece53459281361cbaf0d631ccf5193fdb5af9b5c26b42624bc0fd4262fb90f9df9842a41b2dd768149dd0e2680833bbf524564680

  • SSDEEP

    3072:RkgT1FVV5SDr7+L9DAXqSvbTzD1O0x3Qo9sZBokN08bLXCxqqif9WXdnzxBML18K:Ggp1Kz/xgokBljVJ0nHMBnoQA0

Malware Config

Targets

    • Target

      JaffaCakes118_c8b78a0401f5ae133f7f8cd0ea85d759

    • Size

      193KB

    • MD5

      c8b78a0401f5ae133f7f8cd0ea85d759

    • SHA1

      8324995e6f46fef33fc5b651cb742322d4a7f715

    • SHA256

      7c9081466a89fb08ddbe6b12972b669219c4d30551ced84212a092c44480aabd

    • SHA512

      9e5376a3e722908cfe1104eece53459281361cbaf0d631ccf5193fdb5af9b5c26b42624bc0fd4262fb90f9df9842a41b2dd768149dd0e2680833bbf524564680

    • SSDEEP

      3072:RkgT1FVV5SDr7+L9DAXqSvbTzD1O0x3Qo9sZBokN08bLXCxqqif9WXdnzxBML18K:Ggp1Kz/xgokBljVJ0nHMBnoQA0

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks