Overview

overview

10

Static

static

3

JaffaCakes...10.exe

windows7-x64

10

JaffaCakes...10.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_97ac1f8eac4cdad0940e9ce8a36ff010

  • Size

    184KB

  • Sample

    250329-y34xcstpv4

  • MD5

    97ac1f8eac4cdad0940e9ce8a36ff010

  • SHA1

    028667cb29e9cb79b9630d4cd417209dcb3155be

  • SHA256

    213da0ba0be697eb8379fc446d5a2678035c8a4d636980ad433cb71e056bedeb

  • SHA512

    d91e05530759694fb1895055e4107a9195da9957547ccd8f9fd061b9bef19c7df32404690398fd7c4ff0817bd4deacd25210b05788647aebd9af005ce72da6f6

  • SSDEEP

    3072:E4rMtcfV0bYmNpeTZrjfErMPG7MKM+Y2Yl95d4Ld87dQm8iivh6Q1yr:ZrMt2ONajsTMKM+Y2I5G58xvQ1y

Score
10/10
cycbotbackdoordiscoverypersistenceratspywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_97ac1f8eac4cdad0940e9ce8a36ff010

    • Size

      184KB

    • MD5

      97ac1f8eac4cdad0940e9ce8a36ff010

    • SHA1

      028667cb29e9cb79b9630d4cd417209dcb3155be

    • SHA256

      213da0ba0be697eb8379fc446d5a2678035c8a4d636980ad433cb71e056bedeb

    • SHA512

      d91e05530759694fb1895055e4107a9195da9957547ccd8f9fd061b9bef19c7df32404690398fd7c4ff0817bd4deacd25210b05788647aebd9af005ce72da6f6

    • SSDEEP

      3072:E4rMtcfV0bYmNpeTZrjfErMPG7MKM+Y2Yl95d4Ld87dQm8iivh6Q1yr:ZrMt2ONajsTMKM+Y2I5G58xvQ1y

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratspywarestealerupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks