2d311184e7cef40e8900ece7f0fd5a6f5272cb0d9b13bc9511d370e1ae97d3ad | Triage™

Login
Reports

Overview

overview

Static

static

3

jaffacakes...ad.exe

windows10-2004-x64

jaffacakes...ad.exe

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_2d311184e7cef40e8900ece7f0fd5a6f5272cb0d9b13bc9511d370e1ae97d3ad.bin
Size 148KB
Sample261002-j2q7jsdd84
SHA256 2d311184e7cef40e8900ece7f0fd5a6f5272cb0d9b13bc9511d370e1ae97d3ad
MD5 37d73ec5f4b7e2780ae7a49a49c6c974
SHA1 0a874c22ad1f267c6339cc31fe7e6eecd47bf3cc
SHA512 9c7a9da0703781c8e04e1a4baf3fdc16646e5a310cf5876653344318c82cc1a5717f2ea0c90b3f17e5404481df2efd53aa57c3c6fe0fccffb55fe93e6e892c2b
SSDEEP 1536:XW2ffvpXQRCxHP+VTaZoVQeJrrywsHr6U+ND/MjYq/l08igojFh8GPLNl04OoFHw:mXWCt3JrmwsHs6YqSI8CgLNy+FHw
TLSH
T14DE3F7167682A6B5D92A83766E2101F840C86D310085DD1FF2C7B76A7BF29EB7370787
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_2d311184e7cef40e8900ece7f0fd5a6f5272cb0d9b13bc9511d370e1ae97d3ad.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

9 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

jaffacakes118_2d311184e7cef40e8900ece7f0fd5a6f5272cb0d9b13bc9511d370e1ae97d3ad.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  jaffacakes118_2d311184e7cef40e8900ece7f0fd5a6f5272cb0d9b13bc9511d370e1ae97d3ad.bin
- Size 148KB
- SHA256 2d311184e7cef40e8900ece7f0fd5a6f5272cb0d9b13bc9511d370e1ae97d3ad
- MD5 37d73ec5f4b7e2780ae7a49a49c6c974
- SHA1 0a874c22ad1f267c6339cc31fe7e6eecd47bf3cc
- SHA512 9c7a9da0703781c8e04e1a4baf3fdc16646e5a310cf5876653344318c82cc1a5717f2ea0c90b3f17e5404481df2efd53aa57c3c6fe0fccffb55fe93e6e892c2b
- SSDEEP 1536:XW2ffvpXQRCxHP+VTaZoVQeJrrywsHr6U+ND/MjYq/l08igojFh8GPLNl04OoFHw:mXWCt3JrmwsHs6YqSI8CgLNy+FHw
- TLSH
  T14DE3F7167682A6B5D92A83766E2101F840C86D310085DD1FF2C7B76A7BF29EB7370787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies firewall policy service
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

© 2018-2026

Terms | Privacy