bd0cd16a2a531596c4f16910cbea6dfea3d5ffe70a6e555f2f01da8c280fa5d4 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes...d4.exe

windows10-2004-x64

7

jaffacakes...d4.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_bd0cd16a2a531596c4f16910cbea6dfea3d5ffe70a6e555f2f01da8c280fa5d4.bin
Size 36KB
Sample260924-l85pmaba74
SHA256 bd0cd16a2a531596c4f16910cbea6dfea3d5ffe70a6e555f2f01da8c280fa5d4
MD5 91c501554f4d4c532bdc69fb68fbdc3a
SHA1 ce94182cbffe9251bf679f1ec27cfd3619fc2025
SHA512 383202e930200ae60b797fe86c2013228e2f02fcda4d45f280ae83b917e6734019ccc6905e0014549a1eaa8bf991a66193bd256d89f5ec1a2a8c33c395e76ef5
SSDEEP 768:gF6Zh3daFlgD9o1aMCU/2G3njn9xtAQaJ:yENdaEYay/2G3n7tY
TLSH
T1BDF23A467E95C4A2C15340347E80A52AD7AA7C782918B453F7527F8D7CBA7C36A3CE0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_bd0cd16a2a531596c4f16910cbea6dfea3d5ffe70a6e555f2f01da8c280fa5d4.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Behavioral task

behavioral2

Sample

jaffacakes118_bd0cd16a2a531596c4f16910cbea6dfea3d5ffe70a6e555f2f01da8c280fa5d4.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Malware Config

Targets

- Target
  jaffacakes118_bd0cd16a2a531596c4f16910cbea6dfea3d5ffe70a6e555f2f01da8c280fa5d4.bin
- Size 36KB
- SHA256 bd0cd16a2a531596c4f16910cbea6dfea3d5ffe70a6e555f2f01da8c280fa5d4
- MD5 91c501554f4d4c532bdc69fb68fbdc3a
- SHA1 ce94182cbffe9251bf679f1ec27cfd3619fc2025
- SHA512 383202e930200ae60b797fe86c2013228e2f02fcda4d45f280ae83b917e6734019ccc6905e0014549a1eaa8bf991a66193bd256d89f5ec1a2a8c33c395e76ef5
- SSDEEP 768:gF6Zh3daFlgD9o1aMCU/2G3njn9xtAQaJ:yENdaEYay/2G3n7tY
- TLSH
  T1BDF23A467E95C4A2C15340347E80A52AD7AA7C782918B453F7527F8D7CBA7C36A3CE0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer
- Disables service(s)
  defense_evasion execution
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Stops running service(s)
  defense_evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywarestealer

behavioral2

defense_evasiondiscoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy