Overview

overview

10

Static

static

3

JaffaCakes...e7.exe

windows7-x64

10

JaffaCakes...e7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6186d864c5f25345d8c07d31d61846e7

  • Size

    180KB

  • Sample

    250130-l2hlhszmcj

  • MD5

    6186d864c5f25345d8c07d31d61846e7

  • SHA1

    74a7582b07a04de1489c0ef1a4c6bf2bb8f268f7

  • SHA256

    35e0e820ca195111cad0cae7538361c3a68eb612552fdf6c476adfc682a4e4da

  • SHA512

    265992f61f980bb4f1fd8fb6b0db91b68a10bfe8b516629dfc49cb7a8b0e9a99b6b420cb5d72ea8aa0a297d6482faf43940d8be416a6caebbfd39bcd20a24451

  • SSDEEP

    3072:inLbgwBa0lI9fWUPHeedkYD+YUz9epd3khvEgsYjMLW1o10n9ZpYdzk:inYwBlwWw154Ipd3R9ES1qrYq

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_6186d864c5f25345d8c07d31d61846e7

    • Size

      180KB

    • MD5

      6186d864c5f25345d8c07d31d61846e7

    • SHA1

      74a7582b07a04de1489c0ef1a4c6bf2bb8f268f7

    • SHA256

      35e0e820ca195111cad0cae7538361c3a68eb612552fdf6c476adfc682a4e4da

    • SHA512

      265992f61f980bb4f1fd8fb6b0db91b68a10bfe8b516629dfc49cb7a8b0e9a99b6b420cb5d72ea8aa0a297d6482faf43940d8be416a6caebbfd39bcd20a24451

    • SSDEEP

      3072:inLbgwBa0lI9fWUPHeedkYD+YUz9epd3khvEgsYjMLW1o10n9ZpYdzk:inYwBlwWw154Ipd3R9ES1qrYq

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks