Overview

overview

10

Static

static

3

JaffaCakes...aa.exe

windows7-x64

10

JaffaCakes...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_05649f1de174a14b529683c0357364aa

  • Size

    180KB

  • Sample

    250121-sdechsyrdy

  • MD5

    05649f1de174a14b529683c0357364aa

  • SHA1

    f33508b564f0ed785128f1e28d17027c665fd683

  • SHA256

    601d9ae0824320a32eb7051047945d2edc43485c46121c90abf344a381e288eb

  • SHA512

    328301f4dbc53e146d0a6db2fbe353c201ddf866331e5536acff77792da5ed421cb2976254d482bdc65a7cf836d0563ee65a502a5e3134e8bcf77d6faf4d4f53

  • SSDEEP

    3072:Wfi3n8OX0fefWItxDDEdxGUqy/zuOa2gZqomNzZlC2AnKIVOzqIx9trQWSVlmZ82:wiMOkfeVtxDDEdvlZa5ZqomNzbC2An54

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_05649f1de174a14b529683c0357364aa

    • Size

      180KB

    • MD5

      05649f1de174a14b529683c0357364aa

    • SHA1

      f33508b564f0ed785128f1e28d17027c665fd683

    • SHA256

      601d9ae0824320a32eb7051047945d2edc43485c46121c90abf344a381e288eb

    • SHA512

      328301f4dbc53e146d0a6db2fbe353c201ddf866331e5536acff77792da5ed421cb2976254d482bdc65a7cf836d0563ee65a502a5e3134e8bcf77d6faf4d4f53

    • SSDEEP

      3072:Wfi3n8OX0fefWItxDDEdxGUqy/zuOa2gZqomNzZlC2AnKIVOzqIx9trQWSVlmZ82:wiMOkfeVtxDDEdvlZa5ZqomNzbC2An54

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks