1bb4d738118f772e0e6069b400c0944f832d39676e3e099ca3c591042017b87f | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes...7f.exe

windows10-2004-x64

7

jaffacakes...7f.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_1bb4d738118f772e0e6069b400c0944f832d39676e3e099ca3c591042017b87f.bin
Size 36KB
Sample260924-l78pwsba67
SHA256 1bb4d738118f772e0e6069b400c0944f832d39676e3e099ca3c591042017b87f
MD5 e89ebd6b611bb9a9af298efa24939528
SHA1 b4154cad9f9bb247877db219028b047acb89b6d6
SHA512 af04592d48c70ca1a3a8322d9f5510c33c1a0665eca29784deee9260c89ff98f899a1937c04f90335208cb50f384ecf4aec7fdc76189596538a05365da40759f
SSDEEP 768:rGKGvepfWj4c3t9+Uy26Z93JrV3pQKC1Am:rGKGWpuj39+lDZ93JrppFk
TLSH
T10EF24BC77D4998F7C563053078512E2AD77EAB3466097867EB128A893C622C7FA3D10B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_1bb4d738118f772e0e6069b400c0944f832d39676e3e099ca3c591042017b87f.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Behavioral task

behavioral2

Sample

jaffacakes118_1bb4d738118f772e0e6069b400c0944f832d39676e3e099ca3c591042017b87f.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Malware Config

Targets

- Target
  jaffacakes118_1bb4d738118f772e0e6069b400c0944f832d39676e3e099ca3c591042017b87f.bin
- Size 36KB
- SHA256 1bb4d738118f772e0e6069b400c0944f832d39676e3e099ca3c591042017b87f
- MD5 e89ebd6b611bb9a9af298efa24939528
- SHA1 b4154cad9f9bb247877db219028b047acb89b6d6
- SHA512 af04592d48c70ca1a3a8322d9f5510c33c1a0665eca29784deee9260c89ff98f899a1937c04f90335208cb50f384ecf4aec7fdc76189596538a05365da40759f
- SSDEEP 768:rGKGvepfWj4c3t9+Uy26Z93JrV3pQKC1Am:rGKGWpuj39+lDZ93JrppFk
- TLSH
  T10EF24BC77D4998F7C563053078512E2AD77EAB3466097867EB128A893C622C7FA3D10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer
- Disables service(s)
  defense_evasion execution
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Stops running service(s)
  defense_evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywarestealer

behavioral2

defense_evasiondiscoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy