Overview

overview

10

Static

static

3

JaffaCakes...79.exe

windows7-x64

10

JaffaCakes...79.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e93c5ffb04f679ca0e5dae95c34f9879

  • Size

    172KB

  • Sample

    250120-qxpw9a1qbw

  • MD5

    e93c5ffb04f679ca0e5dae95c34f9879

  • SHA1

    d36cb926a0e673a6ab4b77ce175b18c33817eeb9

  • SHA256

    4c25c6f1f41248a690fbb6978bd048bda7ad963a5017a8306004b1c48e667fd6

  • SHA512

    cda1f5cf9647e071be947ca1d2117e0442ebac6d8644a9f285ded29499c439c69bf55277b48a0d24b62f60e14c1fbb0c6cba845f2f810cfb41911706f412ff71

  • SSDEEP

    3072:j+USykMgdEWjgQ6pOoWJMP5/fnOxiYQ4DxD4FNKJYefg5:Sby3gNM4oaMP5uJtNsfKJ

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_e93c5ffb04f679ca0e5dae95c34f9879

    • Size

      172KB

    • MD5

      e93c5ffb04f679ca0e5dae95c34f9879

    • SHA1

      d36cb926a0e673a6ab4b77ce175b18c33817eeb9

    • SHA256

      4c25c6f1f41248a690fbb6978bd048bda7ad963a5017a8306004b1c48e667fd6

    • SHA512

      cda1f5cf9647e071be947ca1d2117e0442ebac6d8644a9f285ded29499c439c69bf55277b48a0d24b62f60e14c1fbb0c6cba845f2f810cfb41911706f412ff71

    • SSDEEP

      3072:j+USykMgdEWjgQ6pOoWJMP5/fnOxiYQ4DxD4FNKJYefg5:Sby3gNM4oaMP5uJtNsfKJ

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks