Overview

overview

10

Static

static

3

JaffaCakes...e8.exe

windows7-x64

10

JaffaCakes...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_797c25ac265de8037108f4e94eaeffe8

  • Size

    188KB

  • Sample

    250202-f8qykszkem

  • MD5

    797c25ac265de8037108f4e94eaeffe8

  • SHA1

    7b7f0074f0d4359c12c758cfeb7683429da78278

  • SHA256

    1280c3015517aad9db42e2eeb89248e2918e06164803d602fadeec6a3a55faf7

  • SHA512

    ae8cbc9bb743a47a728890cfc36d71d5c7e9355ef0794dcb7702d11690d4c56a07ee78de4b221f954b24872517562b07691609dea75be94ffa33f4311eaa624c

  • SSDEEP

    3072:BT4VNXhYIY2Cf6owIOa5SKsStD3ortfAdIJcCaP4BcrYeLO11ui+lIgnD:BqNX6CnowIOaQiD4JfUycC5WrY71uiNK

Score
10/10
cycbotbackdoordiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_797c25ac265de8037108f4e94eaeffe8

    • Size

      188KB

    • MD5

      797c25ac265de8037108f4e94eaeffe8

    • SHA1

      7b7f0074f0d4359c12c758cfeb7683429da78278

    • SHA256

      1280c3015517aad9db42e2eeb89248e2918e06164803d602fadeec6a3a55faf7

    • SHA512

      ae8cbc9bb743a47a728890cfc36d71d5c7e9355ef0794dcb7702d11690d4c56a07ee78de4b221f954b24872517562b07691609dea75be94ffa33f4311eaa624c

    • SSDEEP

      3072:BT4VNXhYIY2Cf6owIOa5SKsStD3ortfAdIJcCaP4BcrYeLO11ui+lIgnD:BqNX6CnowIOaQiD4JfUycC5WrY71uiNK

    Score
    10/10
    cycbotbackdoordiscoveryratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks