Overview

overview

10

Static

static

3

JaffaCakes...53.exe

windows7-x64

10

JaffaCakes...53.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_2bae47087fb186faefdf1fec7a1d0053

  • Size

    181KB

  • Sample

    250125-precwsvjcn

  • MD5

    2bae47087fb186faefdf1fec7a1d0053

  • SHA1

    08f7ce5175b31b7449ed57d97d51459c16638688

  • SHA256

    0e0f96787cb12572ccfa4ef5f9244fbf218a37dbaa5248f61e5fd5b8d364a911

  • SHA512

    bf1ae539180b9c0cfce984ae37d06d863f726b65f6a4e2bba5f2d16db5dbd2d433b8ac86b5db9fdbfc46523f014fcb06d3d465142f7de3a00125d492133f4f41

  • SSDEEP

    3072:qOm0gxELrERz+q2CloFU5uPQnRVifWRRKVxYYVxZQEvOU62BgWMYk:qagxAm+q2GVuPGRVi+XqLBvO1Zrj

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_2bae47087fb186faefdf1fec7a1d0053

    • Size

      181KB

    • MD5

      2bae47087fb186faefdf1fec7a1d0053

    • SHA1

      08f7ce5175b31b7449ed57d97d51459c16638688

    • SHA256

      0e0f96787cb12572ccfa4ef5f9244fbf218a37dbaa5248f61e5fd5b8d364a911

    • SHA512

      bf1ae539180b9c0cfce984ae37d06d863f726b65f6a4e2bba5f2d16db5dbd2d433b8ac86b5db9fdbfc46523f014fcb06d3d465142f7de3a00125d492133f4f41

    • SSDEEP

      3072:qOm0gxELrERz+q2CloFU5uPQnRVifWRRKVxYYVxZQEvOU62BgWMYk:qagxAm+q2GVuPGRVi+XqLBvO1Zrj

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks