Overview

overview

10

Static

static

3

JaffaCakes...b7.exe

windows7-x64

10

JaffaCakes...b7.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e4ca327c526d85a2598edc3e49590db7

  • Size

    176KB

  • Sample

    250120-mvy6csvqav

  • MD5

    e4ca327c526d85a2598edc3e49590db7

  • SHA1

    2253c553d8328fc6bab637368566c800924df278

  • SHA256

    69dc9f2126fef82870345bbe15dcf4ccefa3b72a0525c7bbea7402b1ef445ac1

  • SHA512

    9dd1f749edffc928ae205f1063af7c35939c03458c4f812e6d8593bbd7505ebe3ede65efa20e3fdf9ef3b9531f3d8eff4c1b719a14177e93e3348d8563fd6190

  • SSDEEP

    3072:7wbqKYJUz2rp2YLb+tye2FZGZu9ZTA44AM3vf6h1kCZEtd2g4Psp2:7wbqKYyK1L/+7EZ9lRDM/ih2yE6gf

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_e4ca327c526d85a2598edc3e49590db7

    • Size

      176KB

    • MD5

      e4ca327c526d85a2598edc3e49590db7

    • SHA1

      2253c553d8328fc6bab637368566c800924df278

    • SHA256

      69dc9f2126fef82870345bbe15dcf4ccefa3b72a0525c7bbea7402b1ef445ac1

    • SHA512

      9dd1f749edffc928ae205f1063af7c35939c03458c4f812e6d8593bbd7505ebe3ede65efa20e3fdf9ef3b9531f3d8eff4c1b719a14177e93e3348d8563fd6190

    • SSDEEP

      3072:7wbqKYJUz2rp2YLb+tye2FZGZu9ZTA44AM3vf6h1kCZEtd2g4Psp2:7wbqKYyK1L/+7EZ9lRDM/ih2yE6gf

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks