Overview

overview

10

Static

static

3

JaffaCakes...9c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a42c18ffb0c8498155c2aadcb072c39c

  • Size

    169KB

  • Sample

    250409-ks4a7avry6

  • MD5

    a42c18ffb0c8498155c2aadcb072c39c

  • SHA1

    3f35fbca35ee2b94e16b36e27b2aec4f668ab78c

  • SHA256

    74eea929eddb500065246acf0287f270e6ec5da96605d5c20b063cf0ba1201e8

  • SHA512

    97a98c02cd596779bce03921887e043ce6206cbce155f932bb9c99b387398a9c21f0f57836b0e4a7a4c501fd64432e220aca02ce927bd26d269aba9916911a8b

  • SSDEEP

    3072:vASaBv/HCthEWNcBMBCRGT+oN5+eyuHZljVDIZJgqAmsoKrrkJ+jG73:vANN/sEWKCQMTGeRjZQJgLmoPkc2

Score
10/10
cycbotbackdoordiscoverypersistenceratupx

Malware Config

Targets

    • Target

      JaffaCakes118_a42c18ffb0c8498155c2aadcb072c39c

    • Size

      169KB

    • MD5

      a42c18ffb0c8498155c2aadcb072c39c

    • SHA1

      3f35fbca35ee2b94e16b36e27b2aec4f668ab78c

    • SHA256

      74eea929eddb500065246acf0287f270e6ec5da96605d5c20b063cf0ba1201e8

    • SHA512

      97a98c02cd596779bce03921887e043ce6206cbce155f932bb9c99b387398a9c21f0f57836b0e4a7a4c501fd64432e220aca02ce927bd26d269aba9916911a8b

    • SSDEEP

      3072:vASaBv/HCthEWNcBMBCRGT+oN5+eyuHZljVDIZJgqAmsoKrrkJ+jG73:vANN/sEWKCQMTGeRjZQJgLmoPkc2

    Score
    10/10
    cycbotbackdoordiscoverypersistenceratupx

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

      backdoorratcycbot

    • Cycbot family

      cycbot

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks