Overview

overview

10

Static

static

3

JaffaCakes...a6.exe

windows7-x64

10

JaffaCakes...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_36f44fbf3c1845de44bc0816190ba5a6

  • Size

    182KB

  • Sample

    250126-tarn4swjey

  • MD5

    36f44fbf3c1845de44bc0816190ba5a6

  • SHA1

    7ed6c1c16616cef32acb38c505d51077de238828

  • SHA256

    f65d146960c31b04aaa3afa964e957c8dfc8d476d53280c54713b58c50eafe23

  • SHA512

    5097c800fdeb20f054c74059b699c3f760c1bb9a367e62f74d99c242d1e415c2664a86fafd19a5f3ab4edcc4830e0564dd0758b31cab316029fe5f0a69c4c6d2

  • SSDEEP

    3072:/MN3yNiVhbXh4soqvuv+EW5dU1yhOLcr28jCCiLdeZtXfEmZl3lY+r:/M0NYhbx4bouv+bsL0Fj/fEG3lYE

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_36f44fbf3c1845de44bc0816190ba5a6

    • Size

      182KB

    • MD5

      36f44fbf3c1845de44bc0816190ba5a6

    • SHA1

      7ed6c1c16616cef32acb38c505d51077de238828

    • SHA256

      f65d146960c31b04aaa3afa964e957c8dfc8d476d53280c54713b58c50eafe23

    • SHA512

      5097c800fdeb20f054c74059b699c3f760c1bb9a367e62f74d99c242d1e415c2664a86fafd19a5f3ab4edcc4830e0564dd0758b31cab316029fe5f0a69c4c6d2

    • SSDEEP

      3072:/MN3yNiVhbXh4soqvuv+EW5dU1yhOLcr28jCCiLdeZtXfEmZl3lY+r:/M0NYhbx4bouv+bsL0Fj/fEG3lYE

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks