Overview

overview

10

Static

static

3

JaffaCakes...17.exe

windows7-x64

10

JaffaCakes...17.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_73f12233600a9e427a59847212835217

  • Size

    189KB

  • Sample

    250201-veqs2stkcr

  • MD5

    73f12233600a9e427a59847212835217

  • SHA1

    3f2a258f7b8bd43042d8835398ecab12c5e1df48

  • SHA256

    0ca38f6b5f015bf3980fd66b036af012a4dddca2211797963145b366648ccc46

  • SHA512

    5bc63ecf507b7e8ce81f3a1d063f03e3f2c33cd4c0d3ce9cdfde963dd12c1ad1d4b83f1858b084c7d03e09f40cd7a759ee52b00a42b46422dc4c9c25c4563aee

  • SSDEEP

    3072:mV3P2odkWNB7FBxrzGcDYRn7CrYQ1+M5lNRmuxX+3B88ENkkrQmLpJ:mVuYB7DxrzGcDYhHW+M5QBjK7QmLp

Score
10/10
cycbotbackdoordiscoverypersistenceratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_73f12233600a9e427a59847212835217

    • Size

      189KB

    • MD5

      73f12233600a9e427a59847212835217

    • SHA1

      3f2a258f7b8bd43042d8835398ecab12c5e1df48

    • SHA256

      0ca38f6b5f015bf3980fd66b036af012a4dddca2211797963145b366648ccc46

    • SHA512

      5bc63ecf507b7e8ce81f3a1d063f03e3f2c33cd4c0d3ce9cdfde963dd12c1ad1d4b83f1858b084c7d03e09f40cd7a759ee52b00a42b46422dc4c9c25c4563aee

    • SSDEEP

      3072:mV3P2odkWNB7FBxrzGcDYRn7CrYQ1+M5lNRmuxX+3B88ENkkrQmLpJ:mVuYB7DxrzGcDYhHW+M5QBjK7QmLp

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks