Overview

overview

10

Static

static

3

JaffaCakes...85.exe

windows7-x64

10

JaffaCakes...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_06385e24cf154854ae87232a7fcf9685

  • Size

    177KB

  • Sample

    250121-vs4l3avlek

  • MD5

    06385e24cf154854ae87232a7fcf9685

  • SHA1

    629b9ab0a2462d434b46861e0fae68bdfb3ccd80

  • SHA256

    0dc673b5c7951079f3054893b239f321e0524cbdfdcd0e9486f3d61978ddb43c

  • SHA512

    fdb4e22755504826e0e11c06bbc447f7858f2bacaf435fff0040640f7ef3c79b53832d42e6112dcc555c92442fa235a4cecc689ffd9c131f856dde15b9d402a2

  • SSDEEP

    3072:sYXNOLpHcDVMhWLyXzG7y9S47TewBNDAGtqQ6wCQBi3T6nW9sh6138EmrM6hPbkv:DO1qMhWLyDG347TeoDACqnuBi19shw3V

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_06385e24cf154854ae87232a7fcf9685

    • Size

      177KB

    • MD5

      06385e24cf154854ae87232a7fcf9685

    • SHA1

      629b9ab0a2462d434b46861e0fae68bdfb3ccd80

    • SHA256

      0dc673b5c7951079f3054893b239f321e0524cbdfdcd0e9486f3d61978ddb43c

    • SHA512

      fdb4e22755504826e0e11c06bbc447f7858f2bacaf435fff0040640f7ef3c79b53832d42e6112dcc555c92442fa235a4cecc689ffd9c131f856dde15b9d402a2

    • SSDEEP

      3072:sYXNOLpHcDVMhWLyXzG7y9S47TewBNDAGtqQ6wCQBi3T6nW9sh6138EmrM6hPbkv:DO1qMhWLyDG347TeoDACqnuBi19shw3V

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks