1a68fed5c7ab26bbeb08210d18155868e7048b11992d11e764db354cadabec29 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jaffacakes....c.exe

windows10-2004-x64

7

jaffacakes....c.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Backdoor.Win32.Aimbot.c.fbeef214bdb86187b7b427389705d42d
Size 175KB
Sample261009-thx6vsbs4x
SHA256 1a68fed5c7ab26bbeb08210d18155868e7048b11992d11e764db354cadabec29
MD5 fbeef214bdb86187b7b427389705d42d
SHA1 f0d2b2f9f81eea4e7e78204005bf03adb7a2f1db
SHA512 e52ce52e2e24236c78922e9af72706d85145d75fc51d9ed8d2d4fcdaaf96049041321037a213f424b1445e819bd5b6d6f4118c8cb2ff7e7278d5aaaf06ff3e45
SSDEEP 3072:4ZYUi1RWUB/wJD/sXxgB6pBOR5OE1EM2jASY1atZgn37zpnop2WtXvs3RV9YVVo:kXwB4JD2Dpy92NgvpnoJtEhVSo
TLSH
T19C0412D4D4CF3C87C085CEF6AFF57A099A76C3DC89050467C3DE0A9AF127139A9A9486
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_Backdoor.Win32.Aimbot.c.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

jaffacakes118_Backdoor.Win32.Aimbot.c.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  jaffacakes118_Backdoor.Win32.Aimbot.c.fbeef214bdb86187b7b427389705d42d
- Size 175KB
- SHA256 1a68fed5c7ab26bbeb08210d18155868e7048b11992d11e764db354cadabec29
- MD5 fbeef214bdb86187b7b427389705d42d
- SHA1 f0d2b2f9f81eea4e7e78204005bf03adb7a2f1db
- SHA512 e52ce52e2e24236c78922e9af72706d85145d75fc51d9ed8d2d4fcdaaf96049041321037a213f424b1445e819bd5b6d6f4118c8cb2ff7e7278d5aaaf06ff3e45
- SSDEEP 3072:4ZYUi1RWUB/wJD/sXxgB6pBOR5OE1EM2jASY1atZgn37zpnop2WtXvs3RV9YVVo:kXwB4JD2Dpy92NgvpnoJtEhVSo
- TLSH
  T19C0412D4D4CF3C87C085CEF6AFF57A099A76C3DC89050467C3DE0A9AF127139A9A9486
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence
- Deletes itself
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy