Overview

overview

10

Static

static

3

JaffaCakes...29.exe

windows7-x64

10

JaffaCakes...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6194d426e72ce347073a9d734ee35429

  • Size

    180KB

  • Sample

    250130-l6g6jsxrhx

  • MD5

    6194d426e72ce347073a9d734ee35429

  • SHA1

    3d7520b2387352a480fae6273d667c8f9d137dde

  • SHA256

    31fe5610b77ae98968b1abe73e6cf6aaa201a431c5f1f7a9cfbca74c284306ae

  • SHA512

    8e4bdad0625801ea0d5087e501466627a9b9df1a6bdce77c8c84ec39643ed327c2e477bb125aabc4f5cd1dd39a5bce9b46396e8e08ac4dbd58f4589c154bfd68

  • SSDEEP

    3072:try0hazeri4zgH3Bffy/cF6ZEKIdN6+uGyEn2tz/NBXOPen1F+P6JQ2F4vKG5Md:tr/rhzOfh6ZgfuG1ezNBePN1k4vLQ

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_6194d426e72ce347073a9d734ee35429

    • Size

      180KB

    • MD5

      6194d426e72ce347073a9d734ee35429

    • SHA1

      3d7520b2387352a480fae6273d667c8f9d137dde

    • SHA256

      31fe5610b77ae98968b1abe73e6cf6aaa201a431c5f1f7a9cfbca74c284306ae

    • SHA512

      8e4bdad0625801ea0d5087e501466627a9b9df1a6bdce77c8c84ec39643ed327c2e477bb125aabc4f5cd1dd39a5bce9b46396e8e08ac4dbd58f4589c154bfd68

    • SSDEEP

      3072:try0hazeri4zgH3Bffy/cF6ZEKIdN6+uGyEn2tz/NBXOPen1F+P6JQ2F4vKG5Md:tr/rhzOfh6ZgfuG1ezNBePN1k4vLQ

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks