1fafcad3ed2849a2182cc8c18e9973179ffef9868485f4de6b4853a3320319ed | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes...ed.exe

windows10-2004-x64

7

jaffacakes...ed.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_1fafcad3ed2849a2182cc8c18e9973179ffef9868485f4de6b4853a3320319ed.bin
Size 39KB
Sample260924-l9lyxaba94
SHA256 1fafcad3ed2849a2182cc8c18e9973179ffef9868485f4de6b4853a3320319ed
MD5 7138aad24a0588ef68b70f554cb0426d
SHA1 49f1f4532f911f8b37a6dd91e3e3332fa992fe19
SHA512 8ccb14ca5020a7c21e0ff97f819bfd04da4415c51097452546e7cb0d433d3523be89482e5c0703c91ed43efc741316c364c872585ea242f7d889f7f04369ceca
SSDEEP 768:/ETUTizBpTsD9t+V1yHBPmR05ChoSk2YwIC4jNy:/EQ+zBpQt+V1yHR1EoSk2Y/rjNy
TLSH
T12C034BDAAE2458B2D652657074C01E27D7FE9E302944B8EBDF0266C93C656C77B3C10B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_1fafcad3ed2849a2182cc8c18e9973179ffef9868485f4de6b4853a3320319ed.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Behavioral task

behavioral2

Sample

jaffacakes118_1fafcad3ed2849a2182cc8c18e9973179ffef9868485f4de6b4853a3320319ed.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Malware Config

Targets

- Target
  jaffacakes118_1fafcad3ed2849a2182cc8c18e9973179ffef9868485f4de6b4853a3320319ed.bin
- Size 39KB
- SHA256 1fafcad3ed2849a2182cc8c18e9973179ffef9868485f4de6b4853a3320319ed
- MD5 7138aad24a0588ef68b70f554cb0426d
- SHA1 49f1f4532f911f8b37a6dd91e3e3332fa992fe19
- SHA512 8ccb14ca5020a7c21e0ff97f819bfd04da4415c51097452546e7cb0d433d3523be89482e5c0703c91ed43efc741316c364c872585ea242f7d889f7f04369ceca
- SSDEEP 768:/ETUTizBpTsD9t+V1yHBPmR05ChoSk2YwIC4jNy:/EQ+zBpQt+V1yHR1EoSk2Y/rjNy
- TLSH
  T12C034BDAAE2458B2D652657074C01E27D7FE9E302944B8EBDF0266C93C656C77B3C10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer
- Disables service(s)
  defense_evasion execution
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Stops running service(s)
  defense_evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywarestealer

behavioral2

defense_evasiondiscoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy