cycbot | 35e7558ea5e568e8c393cee2c7568c143de3f4bb9a834006dc828d3f3462d1fd | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...65.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_a41afc015c670ea53e8f611c0bab5165
Size

166KB
Sample

250409-ke2v7svxhv
MD5

a41afc015c670ea53e8f611c0bab5165
SHA1

3f9fafd85dfd5c2d4103a76aa0f58f7d2a8d186b
SHA256

35e7558ea5e568e8c393cee2c7568c143de3f4bb9a834006dc828d3f3462d1fd
SHA512

c2f7be51e861c6d643c477a272430897c6c40a1be38448c71410f5249741d7f93928bbd98e2bac973fbf3685584a49ed1baece1b2758c2e8cb892688c65759a2
SSDEEP

3072:vufEwW90LLrjzeNaDaW1S2XyabQNPxPHtHTk8cRB:2sF0eJW1rNbuFA8oB

Score

10^/10

cycbot backdoor discovery persistence rat upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_a41afc015c670ea53e8f611c0bab5165.exe

Resource

win10v2004-20250314-en

cycbot backdoor discovery persistence rat upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_a41afc015c670ea53e8f611c0bab5165
- Size
  
  166KB
- MD5
  
  a41afc015c670ea53e8f611c0bab5165
- SHA1
  
  3f9fafd85dfd5c2d4103a76aa0f58f7d2a8d186b
- SHA256
  
  35e7558ea5e568e8c393cee2c7568c143de3f4bb9a834006dc828d3f3462d1fd
- SHA512
  
  c2f7be51e861c6d643c477a272430897c6c40a1be38448c71410f5249741d7f93928bbd98e2bac973fbf3685584a49ed1baece1b2758c2e8cb892688c65759a2
- SSDEEP
  
  3072:vufEwW90LLrjzeNaDaW1S2XyabQNPxPHtHTk8cRB:2sF0eJW1rNbuFA8oB
Score

10^/10

cycbot backdoor discovery persistence rat upx
- Cycbot
  Cycbot is a backdoor and trojan written in C++..
  backdoor rat cycbot
- Cycbot family
  cycbot
- Detects Cycbot payload
  Cycbot is a backdoor and trojan written in C++.
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cycbotbackdoordiscoverypersistenceratupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.