squirtdanger | 3d0628367ee41742d7a70fea0f1d64742eae1435b0622b7bb6e6f1a557a8f738 | Triage™

Login
Reports

Overview

overview

Static

static

3

jaffacakes...lx.exe

windows10-2004-x64

jaffacakes...lx.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.MSIL.Agent.sesjlx.9b5e18597dd8725649cab787ff9f5197
Size 30KB
Sample261006-sdx5ma1vaz
SHA256 3d0628367ee41742d7a70fea0f1d64742eae1435b0622b7bb6e6f1a557a8f738
MD5 9b5e18597dd8725649cab787ff9f5197
SHA1 821dc58ea1885efb60292d583811fc7fe00b8773
SHA512 38172841363221ba657410d23a062e3093ec1d0e242110107b8962a37917b72e514ca663f531cbb451f4ba0839835e842e0706e5d41fea808ace2d3252574255
SSDEEP 384:shrxcFH3JiI/08YAgJBhpUgQwG2qhf5d/3nyO6ddViRiii/KCdL6OtvyJaqv7KHC:shtkivlAgzXE2qfvyOAiyhl6qq0C
TLSH
T139D2D0456BC4931EDDB61A316C6341A166F4E710CC03EFED2ECC500B59B61CA9672EF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

squirtdanger banker botnet execution persistence stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_Trojan-Dropper.MSIL.Agent.sesjlx.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

banker botnet execution squirtdanger persistence stealer

Behavioral task

behavioral2

Sample

jaffacakes118_Trojan-Dropper.MSIL.Agent.sesjlx.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

banker botnet execution squirtdanger persistence stealer

Malware Config

Targets

- Target
  jaffacakes118_Trojan-Dropper.MSIL.Agent.sesjlx.9b5e18597dd8725649cab787ff9f5197
- Size 30KB
- SHA256 3d0628367ee41742d7a70fea0f1d64742eae1435b0622b7bb6e6f1a557a8f738
- MD5 9b5e18597dd8725649cab787ff9f5197
- SHA1 821dc58ea1885efb60292d583811fc7fe00b8773
- SHA512 38172841363221ba657410d23a062e3093ec1d0e242110107b8962a37917b72e514ca663f531cbb451f4ba0839835e842e0706e5d41fea808ace2d3252574255
- SSDEEP 384:shrxcFH3JiI/08YAgJBhpUgQwG2qhf5d/3nyO6ddViRiii/KCdL6OtvyJaqv7KHC:shtkivlAgzXE2qfvyOAiyhl6qq0C
- TLSH
  T139D2D0456BC4931EDDB61A316C6341A166F4E710CC03EFED2ECC500B59B61CA9672EF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker botnet execution squirtdanger persistence stealer
- Family: SquirtDanger
  SquirtDanger is a commodity botnet malware family.
  botnet banker stealer squirtdanger
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerbotnetexecutionsquirtdangerpersistencestealer

behavioral2

bankerbotnetexecutionsquirtdangerpersistencestealer

© 2018-2026

Terms | Privacy