cycbot | 86380f3851c9f1906b97a64c7bf9c808cdaefe372d208f7adcdd7073c792e219 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...ea.exe

windows7-x64

JaffaCakes...ea.exe

windows10-2004-x64

3

Sharing

General

Target

JaffaCakes118_1b960e0c6b1f5277f9792ff59b32e0ea
Size

188KB
Sample

250123-2bh3cswlgw
MD5

1b960e0c6b1f5277f9792ff59b32e0ea
SHA1

e718d75502cae3dc90b5715431185cd7983140c7
SHA256

86380f3851c9f1906b97a64c7bf9c808cdaefe372d208f7adcdd7073c792e219
SHA512

8859d0c933f6405718e51a3bea2a30daffdfe2e7743578c2757d6ad141c25678d7a98b727b9fc7b95232ab1624f585bcda339fc55300c48f0c80b68f4a6f84c0
SSDEEP

3072:cxJT2/zPCbfwTYF85CqVnXX+K914mAryDsMDqJertwYEdAKCt:cxJT2/z6bfwk3qj/e52fYWX

Score

10^/10

cycbot backdoor discovery rat spyware stealer upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_1b960e0c6b1f5277f9792ff59b32e0ea.exe

Resource

win7-20240729-en

cycbot backdoor discovery rat spyware stealer upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_1b960e0c6b1f5277f9792ff59b32e0ea.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_1b960e0c6b1f5277f9792ff59b32e0ea
- Size
  
  188KB
- MD5
  
  1b960e0c6b1f5277f9792ff59b32e0ea
- SHA1
  
  e718d75502cae3dc90b5715431185cd7983140c7
- SHA256
  
  86380f3851c9f1906b97a64c7bf9c808cdaefe372d208f7adcdd7073c792e219
- SHA512
  
  8859d0c933f6405718e51a3bea2a30daffdfe2e7743578c2757d6ad141c25678d7a98b727b9fc7b95232ab1624f585bcda339fc55300c48f0c80b68f4a6f84c0
- SSDEEP
  
  3072:cxJT2/zPCbfwTYF85CqVnXX+K914mAryDsMDqJertwYEdAKCt:cxJT2/z6bfwk3qj/e52fYWX
Score

10^/10

cycbot backdoor discovery rat spyware stealer upx
- Cycbot
  Cycbot is a backdoor and trojan written in C++..
  backdoor rat cycbot
- Cycbot family
  cycbot
- Detects Cycbot payload
  Cycbot is a backdoor and trojan written in C++.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cycbotbackdoordiscoveryratspywarestealerupx

behavioral2

© 2018-2025

Terms | Privacy