Overview

overview

10

Static

static

3

JaffaCakes...de.exe

windows7-x64

10

JaffaCakes...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4ca68bcb4f7534bda135b8c0faadb6de

  • Size

    175KB

  • Sample

    250128-tc5zhstmct

  • MD5

    4ca68bcb4f7534bda135b8c0faadb6de

  • SHA1

    e369eff20ac6ced7b390d4b2ad3d12a7596f9d4e

  • SHA256

    634640d05939c5e3043a290eb6347fc027c88396ff3e84068bc9fd728322312b

  • SHA512

    71414ad7fa589f825c3fe82ed470b8496dc2a6b4c861060f019c6b5ba1356adf395faabb0658f6872d57aa1734773820092c259189ef1a8af8f76668859aa05d

  • SSDEEP

    3072:MHPMWaUGlVVA7AimxbMe8g668A4Km+u+vnL3KAmH:OkWanNA7A1598/AqPSI

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_4ca68bcb4f7534bda135b8c0faadb6de

    • Size

      175KB

    • MD5

      4ca68bcb4f7534bda135b8c0faadb6de

    • SHA1

      e369eff20ac6ced7b390d4b2ad3d12a7596f9d4e

    • SHA256

      634640d05939c5e3043a290eb6347fc027c88396ff3e84068bc9fd728322312b

    • SHA512

      71414ad7fa589f825c3fe82ed470b8496dc2a6b4c861060f019c6b5ba1356adf395faabb0658f6872d57aa1734773820092c259189ef1a8af8f76668859aa05d

    • SSDEEP

      3072:MHPMWaUGlVVA7AimxbMe8g668A4Km+u+vnL3KAmH:OkWanNA7A1598/AqPSI

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks