Overview

overview

10

Static

static

3

JaffaCakes...8d.exe

windows7-x64

10

JaffaCakes...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_d2412cf9ff427ad8151ed1314599c98d

  • Size

    186KB

  • Sample

    250119-y6p8davmdp

  • MD5

    d2412cf9ff427ad8151ed1314599c98d

  • SHA1

    a8e69ce0ba4b581c4aa9f5475844150477a4bc86

  • SHA256

    1959401c788dd3a3c0061173aa63d7262fd3a2409ed5a86fa7d972f22588403f

  • SHA512

    c383a7862bad53ce3c2d42f83fa33ad24085fd86b2f0b82b73f596ceeedafd4579d45f59c1300b3a8a1600a2746eb11791167c6c7f8932183cbf0e73b2290f19

  • SSDEEP

    3072:aANX8pbFYckGkuG8dNF1uUiuBkwC8NYJjjZI+2+wQ/O7jyHGxRCTis01Luf:aAG5DF1uUvqwO2VFQGKtr01L

Score
10/10
cycbotbackdoordiscoveryratupx

Malware Config

Targets

    • Target

      JaffaCakes118_d2412cf9ff427ad8151ed1314599c98d

    • Size

      186KB

    • MD5

      d2412cf9ff427ad8151ed1314599c98d

    • SHA1

      a8e69ce0ba4b581c4aa9f5475844150477a4bc86

    • SHA256

      1959401c788dd3a3c0061173aa63d7262fd3a2409ed5a86fa7d972f22588403f

    • SHA512

      c383a7862bad53ce3c2d42f83fa33ad24085fd86b2f0b82b73f596ceeedafd4579d45f59c1300b3a8a1600a2746eb11791167c6c7f8932183cbf0e73b2290f19

    • SSDEEP

      3072:aANX8pbFYckGkuG8dNF1uUiuBkwC8NYJjjZI+2+wQ/O7jyHGxRCTis01Luf:aAG5DF1uUvqwO2VFQGKtr01L

    Score
    10/10
    cycbotbackdoordiscoveryratupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks