General

  • Target

    42d060fd9ffddb0fef6d59adc9d42c5369afeca235a41dc17a01f377422419b9

  • Size

    113KB

  • Sample

    250124-2xtqzssra1

  • MD5

    c30e9fd7b3315ae0a6dd4f648dd1b19a

  • SHA1

    3e0e273862e629fb7321585876054b15c7dd14bc

  • SHA256

    42d060fd9ffddb0fef6d59adc9d42c5369afeca235a41dc17a01f377422419b9

  • SHA512

    652f9f4041146cd1b8be27ed4483622afdb8f5f54c6ee8fc43093ec6b1356306d853da9b26c82952b5646e11d4bbf432fa983c433d56e4ac41e23504cf022989

  • SSDEEP

    3072:ROEY4TjVzg8252TDH+U0p+Cjey9NxOjCzYsKF8t:R1Y4TZg8ZH+U0hj19NxECzYBK

Malware Config

Targets

    • Target

      42d060fd9ffddb0fef6d59adc9d42c5369afeca235a41dc17a01f377422419b9

    • Size

      113KB

    • MD5

      c30e9fd7b3315ae0a6dd4f648dd1b19a

    • SHA1

      3e0e273862e629fb7321585876054b15c7dd14bc

    • SHA256

      42d060fd9ffddb0fef6d59adc9d42c5369afeca235a41dc17a01f377422419b9

    • SHA512

      652f9f4041146cd1b8be27ed4483622afdb8f5f54c6ee8fc43093ec6b1356306d853da9b26c82952b5646e11d4bbf432fa983c433d56e4ac41e23504cf022989

    • SSDEEP

      3072:ROEY4TjVzg8252TDH+U0p+Cjey9NxOjCzYsKF8t:R1Y4TZg8ZH+U0hj19NxECzYBK

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

    • Blackshades family

    • Blackshades payload

    • Modifies firewall policy service

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks