3b549a7eb8f7d8c9634048ed27fc055550133611d4d424d6368efc0264162fc1 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes...c1.exe

windows10-2004-x64

7

jaffacakes...c1.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_3b549a7eb8f7d8c9634048ed27fc055550133611d4d424d6368efc0264162fc1.bin
Size 64KB
Sample260924-mfa5zsbc49
SHA256 3b549a7eb8f7d8c9634048ed27fc055550133611d4d424d6368efc0264162fc1
MD5 dd712e46e2e816cc728515cff217b94c
SHA1 a1d4c74d2bdb48217374a3bdc40d8b5ed8fc19ad
SHA512 6d34cb8d823a5151217febc1d6b4a98bd07652d381b5a7dc3c09917a173f4f54cb24e2c9f89f9743b18b08e4c43ab8ca4590752b0bb29686d33c889a0a5af27b
SSDEEP 768:uDZbazb/nxQfrhr+OLWAG3xyzipDlbAXah1x8sScyjNMur9i7E1:uD8bqMtAGhIibGavx8sJuhi7E1
TLSH
T15653498DA589CEE1ED4709B0066395B8C573316715D1A6AAEECCCCDC473AC217D38ECA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_3b549a7eb8f7d8c9634048ed27fc055550133611d4d424d6368efc0264162fc1.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Behavioral task

behavioral2

Sample

jaffacakes118_3b549a7eb8f7d8c9634048ed27fc055550133611d4d424d6368efc0264162fc1.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Malware Config

Targets

- Target
  jaffacakes118_3b549a7eb8f7d8c9634048ed27fc055550133611d4d424d6368efc0264162fc1.bin
- Size 64KB
- SHA256 3b549a7eb8f7d8c9634048ed27fc055550133611d4d424d6368efc0264162fc1
- MD5 dd712e46e2e816cc728515cff217b94c
- SHA1 a1d4c74d2bdb48217374a3bdc40d8b5ed8fc19ad
- SHA512 6d34cb8d823a5151217febc1d6b4a98bd07652d381b5a7dc3c09917a173f4f54cb24e2c9f89f9743b18b08e4c43ab8ca4590752b0bb29686d33c889a0a5af27b
- SSDEEP 768:uDZbazb/nxQfrhr+OLWAG3xyzipDlbAXah1x8sScyjNMur9i7E1:uD8bqMtAGhIibGavx8sJuhi7E1
- TLSH
  T15653498DA589CEE1ED4709B0066395B8C573316715D1A6AAEECCCCDC473AC217D38ECA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer
- Deletes itself
  defense_evasion
- Disables service(s)
  defense_evasion execution
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Stops running service(s)
  defense_evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Indicator Removal

File Deletion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywarestealer

behavioral2

defense_evasiondiscoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy