Overview

overview

10

Static

static

3

JaffaCakes...7a.exe

windows7-x64

10

JaffaCakes...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4bdaec4dacec66581977ace5a21aea7a

  • Size

    185KB

  • Sample

    250128-rqmc8atrbk

  • MD5

    4bdaec4dacec66581977ace5a21aea7a

  • SHA1

    562f5dd4cc827ff762e5e4aca17ceb255d54cb57

  • SHA256

    7306f0dc2b9d6bc4e9a2875c3eb0a7d31b64bd5b1aa28e00f238884615d87d93

  • SHA512

    c2c1a1c480a2e663fd9fea9ec9a2f50674667d0528609d1892c04691272edc245a1be7d7cf43b388e59fa7fb250ee391f3b1007827989fdc69f9d997917e6339

  • SSDEEP

    3072:cJTJRoRjCk+OlS7h9pYt7K0gl3rV5vNyU8Hfe7qYoxFS/R2/0pcQPny:iTJmk88+Ro7PlH8/wqYoS/oqcQPn

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_4bdaec4dacec66581977ace5a21aea7a

    • Size

      185KB

    • MD5

      4bdaec4dacec66581977ace5a21aea7a

    • SHA1

      562f5dd4cc827ff762e5e4aca17ceb255d54cb57

    • SHA256

      7306f0dc2b9d6bc4e9a2875c3eb0a7d31b64bd5b1aa28e00f238884615d87d93

    • SHA512

      c2c1a1c480a2e663fd9fea9ec9a2f50674667d0528609d1892c04691272edc245a1be7d7cf43b388e59fa7fb250ee391f3b1007827989fdc69f9d997917e6339

    • SSDEEP

      3072:cJTJRoRjCk+OlS7h9pYt7K0gl3rV5vNyU8Hfe7qYoxFS/R2/0pcQPny:iTJmk88+Ro7PlH8/wqYoS/oqcQPn

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks