ca68532bb03c6f44bac64d667aa0905aec5a008642e271bcf31ecdf02115c4ae | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes...ae.exe

windows10-2004-x64

7

jaffacakes...ae.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_ca68532bb03c6f44bac64d667aa0905aec5a008642e271bcf31ecdf02115c4ae.bin
Size 72KB
Sample260924-mfxc8abc65
SHA256 ca68532bb03c6f44bac64d667aa0905aec5a008642e271bcf31ecdf02115c4ae
MD5 372eade866dff72933f16d58488d2721
SHA1 4ac91bcb28f17945527b84758e0e2622d9616f70
SHA512 f54d391b1c5164a456f940435d10a993c4e480aa36be65e7012b72a9277039b6a3a281e08984a7dbe5519c4b2d27fe1217af7fcb1558544351042a385301de1e
SSDEEP 1536:LsBUTJG1zxmTxfE6LLL2YSfc6SZptqPPdau9bXZ1r9CuEBP4:LseGxmJ5orH4uYP4
TLSH
T127734706DAC70463DC54C93C05E24F6A452221F629B51EFE9FD68FFA342E099D43B2DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_ca68532bb03c6f44bac64d667aa0905aec5a008642e271bcf31ecdf02115c4ae.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Behavioral task

behavioral2

Sample

jaffacakes118_ca68532bb03c6f44bac64d667aa0905aec5a008642e271bcf31ecdf02115c4ae.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Malware Config

Targets

- Target
  jaffacakes118_ca68532bb03c6f44bac64d667aa0905aec5a008642e271bcf31ecdf02115c4ae.bin
- Size 72KB
- SHA256 ca68532bb03c6f44bac64d667aa0905aec5a008642e271bcf31ecdf02115c4ae
- MD5 372eade866dff72933f16d58488d2721
- SHA1 4ac91bcb28f17945527b84758e0e2622d9616f70
- SHA512 f54d391b1c5164a456f940435d10a993c4e480aa36be65e7012b72a9277039b6a3a281e08984a7dbe5519c4b2d27fe1217af7fcb1558544351042a385301de1e
- SSDEEP 1536:LsBUTJG1zxmTxfE6LLL2YSfc6SZptqPPdau9bXZ1r9CuEBP4:LseGxmJ5orH4uYP4
- TLSH
  T127734706DAC70463DC54C93C05E24F6A452221F629B51EFE9FD68FFA342E099D43B2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer
- Deletes itself
  defense_evasion
- Disables service(s)
  defense_evasion execution
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Stops running service(s)
  defense_evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Indicator Removal

File Deletion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywarestealer

behavioral2

defense_evasiondiscoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy