d032c815517e9e393070df77d4cf0d13d6a20e85a6598c71f08ef1996ff9531c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes...1c.exe

windows10-2004-x64

7

jaffacakes...1c.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_d032c815517e9e393070df77d4cf0d13d6a20e85a6598c71f08ef1996ff9531c.bin
Size 64KB
Sample260924-mc88lsbb94
SHA256 d032c815517e9e393070df77d4cf0d13d6a20e85a6598c71f08ef1996ff9531c
MD5 1ad07c2bf3f67af995b55d0efba7c1d4
SHA1 364ee84c6e3594aca6ab78a3ab94575e37c93794
SHA512 6a560d4ea0c15e384ff07fdba412b686ca0efa2b3f0892da244bd1cb07ff6b5fd078b71ef85c3cbaad6a65a51fe4f17e5f19c4424e4bd604dc4c568b74adeae8
SSDEEP 1536:uD8bqWUoB//3E4fjSF3mmGzbQbxtZXmF:Y8bHUo13nLo3mmGkL9mF
TLSH
T1EE53494EAA86CEE0EC5346B0466756B4C43372232AE556A6EECCCCDC0729D517C35ECE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_d032c815517e9e393070df77d4cf0d13d6a20e85a6598c71f08ef1996ff9531c.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Behavioral task

behavioral2

Sample

jaffacakes118_d032c815517e9e393070df77d4cf0d13d6a20e85a6598c71f08ef1996ff9531c.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Malware Config

Targets

- Target
  jaffacakes118_d032c815517e9e393070df77d4cf0d13d6a20e85a6598c71f08ef1996ff9531c.bin
- Size 64KB
- SHA256 d032c815517e9e393070df77d4cf0d13d6a20e85a6598c71f08ef1996ff9531c
- MD5 1ad07c2bf3f67af995b55d0efba7c1d4
- SHA1 364ee84c6e3594aca6ab78a3ab94575e37c93794
- SHA512 6a560d4ea0c15e384ff07fdba412b686ca0efa2b3f0892da244bd1cb07ff6b5fd078b71ef85c3cbaad6a65a51fe4f17e5f19c4424e4bd604dc4c568b74adeae8
- SSDEEP 1536:uD8bqWUoB//3E4fjSF3mmGzbQbxtZXmF:Y8bHUo13nLo3mmGkL9mF
- TLSH
  T1EE53494EAA86CEE0EC5346B0466756B4C43372232AE556A6EECCCCDC0729D517C35ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer
- Deletes itself
  defense_evasion
- Disables service(s)
  defense_evasion execution
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Stops running service(s)
  defense_evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Indicator Removal

File Deletion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywarestealer

behavioral2

defense_evasiondiscoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy