General

  • Target

    JaffaCakes118_a5a9d6a811a6ac220c16bdfb9f2784de

  • Size

    171KB

  • Sample

    250409-s6fq2svrz9

  • MD5

    a5a9d6a811a6ac220c16bdfb9f2784de

  • SHA1

    0cc98d24979c5b3eb8d8bbf9f0b2a1041c829277

  • SHA256

    26edb65ebd8068da4a53045b67e82d1e0a9076e344ce51a01110440c17a31cd1

  • SHA512

    bb459f691f3b12a07e823afc0a83a9c94e700c769506bb814360d63eed47fa2871524f47e3306db3641a5b708d54ba84c7e8f3b19482cc5c3b9613a18167caa7

  • SSDEEP

    3072:6ss0CqwgO/CF1C+b4fotEfG2cX5J3YAndhNuoF2bm2EsqkfcV43EEJcT/21:PsRqfOWUfotEfDcX1DuyAEE2i

Malware Config

Targets

    • Target

      JaffaCakes118_a5a9d6a811a6ac220c16bdfb9f2784de

    • Size

      171KB

    • MD5

      a5a9d6a811a6ac220c16bdfb9f2784de

    • SHA1

      0cc98d24979c5b3eb8d8bbf9f0b2a1041c829277

    • SHA256

      26edb65ebd8068da4a53045b67e82d1e0a9076e344ce51a01110440c17a31cd1

    • SHA512

      bb459f691f3b12a07e823afc0a83a9c94e700c769506bb814360d63eed47fa2871524f47e3306db3641a5b708d54ba84c7e8f3b19482cc5c3b9613a18167caa7

    • SSDEEP

      3072:6ss0CqwgO/CF1C+b4fotEfG2cX5J3YAndhNuoF2bm2EsqkfcV43EEJcT/21:PsRqfOWUfotEfDcX1DuyAEE2i

    • Cycbot

      Cycbot is a backdoor and trojan written in C++..

    • Cycbot family

    • Detects Cycbot payload

      Cycbot is a backdoor and trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks