Overview

overview

10

Static

static

3

JaffaCakes...18.exe

windows7-x64

10

JaffaCakes...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6d2c536976f7aaebca2551f244d2b418

  • Size

    197KB

  • Sample

    250131-xwyakawqbq

  • MD5

    6d2c536976f7aaebca2551f244d2b418

  • SHA1

    a75f90203c23619511ca83314c49e829381f3b64

  • SHA256

    c0468f8de5fc52a985a37fc3cf0ffccf3b7e60c4055bcd2b3c716beb75178f6b

  • SHA512

    342bc964e813d4b5076a910b5c4d3f46b1a505287c603e5993308d5e69cf68450ddaae24cf4e57e46ad83d4892cc48a77e3ae2855126f20e64faf8add25d5dee

  • SSDEEP

    3072:IJh43aJK0KdhDzgHKEevptK3GibiqZP+KBOFXpoSbZpL4QIm436qSukrTNj:8e3zgqEi03GiOCDgdpjlpL4bb6Fpj

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_6d2c536976f7aaebca2551f244d2b418

    • Size

      197KB

    • MD5

      6d2c536976f7aaebca2551f244d2b418

    • SHA1

      a75f90203c23619511ca83314c49e829381f3b64

    • SHA256

      c0468f8de5fc52a985a37fc3cf0ffccf3b7e60c4055bcd2b3c716beb75178f6b

    • SHA512

      342bc964e813d4b5076a910b5c4d3f46b1a505287c603e5993308d5e69cf68450ddaae24cf4e57e46ad83d4892cc48a77e3ae2855126f20e64faf8add25d5dee

    • SSDEEP

      3072:IJh43aJK0KdhDzgHKEevptK3GibiqZP+KBOFXpoSbZpL4QIm436qSukrTNj:8e3zgqEi03GiOCDgdpjlpL4bb6Fpj

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks