b88384469082b643cec175bdb448abbe3112286144ef25c22932786309b216d6 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes...3c.exe

windows10-2004-x64

7

jaffacakes...3c.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows11-ltsc_2024-x64

3

$TEMP/~nsi...70.dll

windows10-2004-x64

3

$TEMP/~nsi...70.dll

windows11-ltsc_2024-x64

3

Cloud-Web_2_70.dll

windows10-2004-x64

6

Cloud-Web_2_70.dll

windows11-ltsc_2024-x64

6

Cloud-Web_...70.dll

windows10-2004-x64

3

Cloud-Web_...70.dll

windows11-ltsc_2024-x64

3

Cloud-Web_...70.dll

windows10-2004-x64

3

Cloud-Web_...70.dll

windows11-ltsc_2024-x64

3

Cloud-Web_run.exe

windows10-2004-x64

3

Cloud-Web_run.exe

windows11-ltsc_2024-x64

3

Cloud-Web_tb_2_70.dll

windows10-2004-x64

3

Cloud-Web_tb_2_70.dll

windows11-ltsc_2024-x64

3

cloud-web_...70.exe

windows10-2004-x64

3

cloud-web_...70.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c
Size 883KB
Sample260919-gamnyaxcld
SHA256 b88384469082b643cec175bdb448abbe3112286144ef25c22932786309b216d6
MD5 6d57f4755c870d7be9a5a1f29d827a3c
SHA1 bf4c11ff2c76078a3fb4060b881fa706b6f51f2e
SHA512 0e71fadc71635cdfe0750f282cf5397fd7f6306774bf02ce9fc2ad482db7df36a7155db7e9902f3703e1cbb8b70bccff92cc38973b72a5a0df060936552af603
SSDEEP 12288:QACAwTj7sGwrnf0sySw+RioG8R19afFeyN60tYTViTeyJH36rGfLs2mptPqRD:LCdgGwrn0WRPvofYy65i536rG/0w
TLSH
T12F15238287D55A93ED6187B442E3FE7F2764B3E0E10516220BA039DB162858E493FF5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery installer spyware stealer

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$TEMP/~nsis/Cloud-Web_nad_2_70.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$TEMP/~nsis/Cloud-Web_nad_2_70.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Cloud-Web_2_70.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

adware discovery stealer

Behavioral task

behavioral12

Sample

Cloud-Web_2_70.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

adware discovery stealer

Behavioral task

behavioral13

Sample

Cloud-Web_mime_2_70.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Cloud-Web_mime_2_70.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Cloud-Web_nad_2_70.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Cloud-Web_nad_2_70.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Cloud-Web_run.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

Cloud-Web_run.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

Cloud-Web_tb_2_70.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

Cloud-Web_tb_2_70.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

cloud-web_svc_2_70.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

cloud-web_svc_2_70.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c
- Size 883KB
- SHA256 b88384469082b643cec175bdb448abbe3112286144ef25c22932786309b216d6
- MD5 6d57f4755c870d7be9a5a1f29d827a3c
- SHA1 bf4c11ff2c76078a3fb4060b881fa706b6f51f2e
- SHA512 0e71fadc71635cdfe0750f282cf5397fd7f6306774bf02ce9fc2ad482db7df36a7155db7e9902f3703e1cbb8b70bccff92cc38973b72a5a0df060936552af603
- SSDEEP 12288:QACAwTj7sGwrnf0sySw+RioG8R19afFeyN60tYTViTeyJH36rGfLs2mptPqRD:LCdgGwrn0WRPvofYy65i536rG/0w
- TLSH
  T12F15238287D55A93ED6187B442E3FE7F2764B3E0E10516220BA039DB162858E493FF5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH
  T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 b214d73aea95191f7363ad93cdc12b6fbd50a3a54b0aa891b3d45bc4b7b2aa04
- MD5 8f4ac52cb2f7143f29f114add12452ad
- SHA1 29dc25f5d69bf129d608b83821c8ec8ab8c8edb3
- SHA512 2f9e2c7450557c2b88a12d3a3b4ab999c9f2a4df0d39dcd795b307b89855387bc96fc6d4fb51de8f33de0780e08a3b15fdad43daeaf7373cca71b01d7afdaf0c
- SSDEEP 48:6sG7qYBUYBFxhRwYCI0owYlOdkPm4LYZ5sRXEv26vqAa4GEVu:HhYBUYBL0Toa7+Q5sKG4GEV
- TLSH
  T1FA91767353F961E0C1CB0F72308715E7FB77C87013A6A15E0A63A39556A1597EC2C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $TEMP/~nsis/Cloud-Web_nad_2_70.dll
- Size 531KB
- SHA256 fca90f7d83dfe5933fe3994e3644d1ce10e9b316eb432d75dd6da9be87a766fd
- MD5 baa82af11cdf29b93ad09614d51e7407
- SHA1 303d4ba397797ce361083ca9f58d1ffa0ad5c519
- SHA512 e7e5959a85edfdfeb831e8e2157e306c0ad367f3235aa1248dfd74bc2da71b4272d188b4ac3a2c16d46ced6bc9215b3a496f14fdb5fc981b2ad0a0fd922fac00
- SSDEEP 12288:WoxP7ijRDYsZNa8JU7aAlxZoZ4qafiSIjL:fxP70ZrJizboZ4qafiSIjL
- TLSH
  T1BBC4C630B135ADB7F2AA05B07C7DA514709B2F601740548FA7C6BC292AF3792616CE6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Cloud-Web_2_70.dl_
- Size 123KB
- SHA256 dd4933880f0b0d8236e0cf35046dbeb87416972223564e87a1335092deb3a474
- MD5 f717fa103f18e7a2844f876453bbe567
- SHA1 10410f393a29827fca5dd5ae327c298cb29d5308
- SHA512 66c176c41372c87febf8cccb9ebe9c0fcb7ddda0f8bedc3c4dd71475d4b8bc3afa228ec9c4f84be148589d0b3b4b4a0541f633641f1ea1542a0a02b25566267f
- SSDEEP 3072:TNG0ZeC/azzmWxd/mZQA3PI46eqt0Grktbnx:5tzyKYJmmAMeUro
- TLSH
  T1E1C36C01B5429135D4EB147D89BE6F26A72EBEB00F5468C3BB983B9C4F782E27D35046
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware discovery stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral11 behavioral12
- Target
  Cloud-Web_mime_2_70.dl_
- Size 210KB
- SHA256 6807aee8007988c5409a947a526c187c66e349886399541454800ce2a99c2442
- MD5 e03152320af546785839f21cefd28ce1
- SHA1 7264e5753bb5313b9ceb69d05c15e000ed938559
- SHA512 93681775e96cb80b8cc4b89c788902f5070497c5a0120c0ba965c14e651ab3726387bc0d3f8feeaf315ae45bd7bf40bf37f1e2fd379b89bc812c9dd2fdfefb5e
- SSDEEP 3072:6a8sgv0ObRPWecmwdM808YQ1AyygLLdMFktjDVe7IFy4P0ngbSKNrXRenv:6Cgv0q0ecmf806ayyIL+Fujx4Iw4AuFG
- TLSH
  T1D6247D213642C036D68F11344A3A9B6A6A7DBE710B22D0CB7BD46E7E5E706C19F35B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Cloud-Web_nad_2_70.dl_
- Size 531KB
- SHA256 fca90f7d83dfe5933fe3994e3644d1ce10e9b316eb432d75dd6da9be87a766fd
- MD5 baa82af11cdf29b93ad09614d51e7407
- SHA1 303d4ba397797ce361083ca9f58d1ffa0ad5c519
- SHA512 e7e5959a85edfdfeb831e8e2157e306c0ad367f3235aa1248dfd74bc2da71b4272d188b4ac3a2c16d46ced6bc9215b3a496f14fdb5fc981b2ad0a0fd922fac00
- SSDEEP 12288:WoxP7ijRDYsZNa8JU7aAlxZoZ4qafiSIjL:fxP70ZrJizboZ4qafiSIjL
- TLSH
  T1BBC4C630B135ADB7F2AA05B07C7DA514709B2F601740548FA7C6BC292AF3792616CE6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Cloud-Web_run.ex_
- Size 127KB
- SHA256 869be362880f9075d389eef13ad53278cbe0522f58f4dfff10e47329266a20a0
- MD5 0972c73f63af6288d601a18d5377650d
- SHA1 5481f869e248d91ece4678ac9824258895b3fee5
- SHA512 7e0b7d2aa4d5fbdd18fec31826d21e3bfe6cfa7cbbed55fa63770900d0e84b72a5a18c03afc4dc1629a3d325469f09d210e2207f56f1242135b7ee78fcd4d10a
- SSDEEP 1536:vKHHEUo+d49J2uSF0/cyqsMYdLY3wvfpxYnp:CH3eB/cyqsMYosYnp
- TLSH
  T127D34B017C018546C927C5BD9DABCEB42A76AEFE97542F2372B83D9D0876FA0633510E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Cloud-Web_tb_2_70.dl_
- Size 127KB
- SHA256 fe79854d4f9fa9a456fc748bf23cec34d6bb31aadbf20bed839db11c3b08d483
- MD5 e78cc86088adc12b428ed14808d28879
- SHA1 1e8c4d7423d93e9ec7f71912a9b2708f83052ef9
- SHA512 3ec9cc68335b0a903e9f6fdefd070ddb6825213d118259062fa0bfbffce5b9eaf05247cdddcf7af90351a3902ac5d1113b232eed00e954ff62f673cf9ac58879
- SSDEEP 3072:1csRZq+GIN/GR/7gkdIIZRZDNtej/p3Ymxs9Dqtnl:qH9geR/7wI1s/xs92r
- TLSH
  T109D36C017581917AF4EB047E49BA6F3AA72EAE705B6134C3B3443B8D1EB87D2B935047
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  cloud-web_svc_2_70.ex_
- Size 107KB
- SHA256 65e935f8c19569df5d38bfe1e876944e0d24dffcae0c40e0169b540794db0564
- MD5 cc0880dcf38d15e9bc38f58142ea8f31
- SHA1 fd38cce8da1b1176ce9fa6e5a8f07a1b535c02f9
- SHA512 4db76acf7b603f9092ac35d75bd034c2244dc564566156de62b99c860bac535f0719894ba2685fcaf1e4e4fdb9f69f81df7b975e683069403136e8148f428767
- SSDEEP 3072:M2AruuuKVU/Vb2hz01EhTP8a5GJs1t6inb:M2ArwKVS1ElPl9N
- TLSH
  T1CCB37C22B1D1C5B6F44A00B246E58F769E3BEF711B0124C3E3F4599259B4BF1963A24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

adwarediscoverystealer

behavioral12

adwarediscoverystealer

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

behavioral22

© 2018-2026

Terms | Privacy