Overview

overview

10

Static

static

3

JaffaCakes...18.exe

windows7-x64

10

JaffaCakes...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1fda83391a3ecd8aee11c72242427118

  • Size

    179KB

  • Sample

    250124-kw2a1azqhv

  • MD5

    1fda83391a3ecd8aee11c72242427118

  • SHA1

    b162627502d183a2bcc65381e13ff3d3955becab

  • SHA256

    0ce5bf414a9e0238ebf5f8f62c370ad81e2d4f1deb8a04c9b45742e87882b2ba

  • SHA512

    313246df4652b36a114938da66ae4383942872ade614df9a60d8622a121821ce0def0a86c8d40d80846743aae7da8a12f2603a24984960daf8b89c2a7a2d1329

  • SSDEEP

    3072:sgpx7vQnUqzXDPsF4mulUIuvgFMEuUGhTAAs38pXfKffiOVhEfwVi8Ei5F+I26ap:sgplKv/PsimyUIub7UdAs38pvKnjEfwa

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_1fda83391a3ecd8aee11c72242427118

    • Size

      179KB

    • MD5

      1fda83391a3ecd8aee11c72242427118

    • SHA1

      b162627502d183a2bcc65381e13ff3d3955becab

    • SHA256

      0ce5bf414a9e0238ebf5f8f62c370ad81e2d4f1deb8a04c9b45742e87882b2ba

    • SHA512

      313246df4652b36a114938da66ae4383942872ade614df9a60d8622a121821ce0def0a86c8d40d80846743aae7da8a12f2603a24984960daf8b89c2a7a2d1329

    • SSDEEP

      3072:sgpx7vQnUqzXDPsF4mulUIuvgFMEuUGhTAAs38pXfKffiOVhEfwVi8Ei5F+I26ap:sgplKv/PsimyUIub7UdAs38pvKnjEfwa

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks