79519ae06b32fa0735356a1cf1dadd4b732ed8ed5258bc34d055fafc3fabe98c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes...8c.exe

windows10-2004-x64

7

jaffacakes...8c.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_79519ae06b32fa0735356a1cf1dadd4b732ed8ed5258bc34d055fafc3fabe98c.bin
Size 64KB
Sample260924-me4e5sbc45
SHA256 79519ae06b32fa0735356a1cf1dadd4b732ed8ed5258bc34d055fafc3fabe98c
MD5 2787e36514aafd503960f20f173861a3
SHA1 3acc1ce13bf2da1227d8ff859e3890fbbabe260a
SHA512 85b80d8900ef7e964c5fcb3a47c1f8daeb442764431cf2cba1fe7485d00866fa45b724b618ac82e540b4f6efae07e9cada763f3dccd94be9f1c41c0a52e7451f
SSDEEP 768:uDZbazb/nxQfrhr6hfGamVwg5oLiDq26Fc8e2uO1aXn06yjNq4aW9/8Eg3Pw:uD8bqw5nmVD5op2TbO1KnL4Z9EEg3Y
TLSH
T17353385EA986CEE4ED134571426752BAC433716B1AD5A29AEECCCCCC433AC517C34ECA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_79519ae06b32fa0735356a1cf1dadd4b732ed8ed5258bc34d055fafc3fabe98c.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Behavioral task

behavioral2

Sample

jaffacakes118_79519ae06b32fa0735356a1cf1dadd4b732ed8ed5258bc34d055fafc3fabe98c.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Malware Config

Targets

- Target
  jaffacakes118_79519ae06b32fa0735356a1cf1dadd4b732ed8ed5258bc34d055fafc3fabe98c.bin
- Size 64KB
- SHA256 79519ae06b32fa0735356a1cf1dadd4b732ed8ed5258bc34d055fafc3fabe98c
- MD5 2787e36514aafd503960f20f173861a3
- SHA1 3acc1ce13bf2da1227d8ff859e3890fbbabe260a
- SHA512 85b80d8900ef7e964c5fcb3a47c1f8daeb442764431cf2cba1fe7485d00866fa45b724b618ac82e540b4f6efae07e9cada763f3dccd94be9f1c41c0a52e7451f
- SSDEEP 768:uDZbazb/nxQfrhr6hfGamVwg5oLiDq26Fc8e2uO1aXn06yjNq4aW9/8Eg3Pw:uD8bqw5nmVD5op2TbO1KnL4Z9EEg3Y
- TLSH
  T17353385EA986CEE4ED134571426752BAC433716B1AD5A29AEECCCCCC433AC517C34ECA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer
- Deletes itself
  defense_evasion
- Disables service(s)
  defense_evasion execution
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Stops running service(s)
  defense_evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Indicator Removal

File Deletion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywarestealer

behavioral2

defense_evasiondiscoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy