Overview

overview

10

Static

static

3

85b41b6e00...7a.exe

windows7-x64

10

85b41b6e00...7a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85b41b6e00372fc722a5e7960b1bb0046b8a97566abc4a3f1072c3b3fe31277a.exe

  • Size

    175KB

  • Sample

    250124-tawcaswjht

  • MD5

    9d5aab67a846e6041c559f827996e562

  • SHA1

    c066222ff58ef75101703b38d35caf5fb16c811c

  • SHA256

    85b41b6e00372fc722a5e7960b1bb0046b8a97566abc4a3f1072c3b3fe31277a

  • SHA512

    c69b4a69bcb3888d960e8bebecf9fc6af37b6c10ef50a14da31be034f7ea39f662938c250b95f61cf19638439239f28bdb29d5a1c396b1c3338ffdaf7e5e8a8d

  • SSDEEP

    3072:KeF7Dpd7BzkiXI+wl9N/iqAx9xbWl/3u88Zw8WUL65+V3ZsXngi:KeFnpXzkCwbZ/3P8RLWe3uXnf

Score
10/10
cycbotbackdoordiscoverypersistenceratspywarestealerupx

Malware Config

Targets

    • Target

      85b41b6e00372fc722a5e7960b1bb0046b8a97566abc4a3f1072c3b3fe31277a.exe

    • Size

      175KB

    • MD5

      9d5aab67a846e6041c559f827996e562

    • SHA1

      c066222ff58ef75101703b38d35caf5fb16c811c

    • SHA256

      85b41b6e00372fc722a5e7960b1bb0046b8a97566abc4a3f1072c3b3fe31277a

    • SHA512

      c69b4a69bcb3888d960e8bebecf9fc6af37b6c10ef50a14da31be034f7ea39f662938c250b95f61cf19638439239f28bdb29d5a1c396b1c3338ffdaf7e5e8a8d

    • SSDEEP

      3072:KeF7Dpd7BzkiXI+wl9N/iqAx9xbWl/3u88Zw8WUL65+V3ZsXngi:KeFnpXzkCwbZ/3P8RLWe3uXnf

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks