Overview

overview

10

Static

static

3

JaffaCakes...37.exe

windows7-x64

10

JaffaCakes...37.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_428294be76f32616ddfae8aa38f15f37

  • Size

    201KB

  • Sample

    250127-w8gmxa1pgq

  • MD5

    428294be76f32616ddfae8aa38f15f37

  • SHA1

    5b692612176dd7eb40f6c71578380b49a75b6c57

  • SHA256

    ee77f481606f6571a985dbbf50e101449a7546bc35bf71216fd351ec741ac991

  • SHA512

    bfa6b97edef6031de6d043a5d83daca88e2d38e7b602e072bfeae7041056c7378524d53322f194d2137515ea7a5d85270fc8a11822ec86e6ef06536def289491

  • SSDEEP

    3072:JYPVYaCbrH77ZzdfTYJ1U8e+czCeC19pVIovkh5a5MIDDOHs6kz5UEJIr0y:6VYaW7Jd87RPeCTsqk3VIWqU7rF

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_428294be76f32616ddfae8aa38f15f37

    • Size

      201KB

    • MD5

      428294be76f32616ddfae8aa38f15f37

    • SHA1

      5b692612176dd7eb40f6c71578380b49a75b6c57

    • SHA256

      ee77f481606f6571a985dbbf50e101449a7546bc35bf71216fd351ec741ac991

    • SHA512

      bfa6b97edef6031de6d043a5d83daca88e2d38e7b602e072bfeae7041056c7378524d53322f194d2137515ea7a5d85270fc8a11822ec86e6ef06536def289491

    • SSDEEP

      3072:JYPVYaCbrH77ZzdfTYJ1U8e+czCeC19pVIovkh5a5MIDDOHs6kz5UEJIr0y:6VYaW7Jd87RPeCTsqk3VIWqU7rF

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks