blackshades | 22eb5b185959f7e0ecab1269748186ba8c4cb291ebc96ae4475a87dcab4f31ae | Triage

Sharing

General

Target

JaffaCakes118_569b8837e675090b6267a8aa90f67363
Size

1.2MB
Sample

250129-n6p79svqgk
MD5

569b8837e675090b6267a8aa90f67363
SHA1

fb7f2ab70b691ed5479bbd93476c3f58011aa489
SHA256

22eb5b185959f7e0ecab1269748186ba8c4cb291ebc96ae4475a87dcab4f31ae
SHA512

e745ca29885918eeb25eeff93b71cc2881d5fab703e1556a488391f0ab2b59b3fab1d35e6f304ada9b09d1249f791c6d4c7098644240b083d3b1d46c181e99e2
SSDEEP

24576:TC3bqfFwCGoV9wdGzJUEarzoebZkT+RWj+9iKbzl:23bsF/LKQX4biO6TKbB

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_569b8837e675090b6267a8aa90f67363
- Size
  
  1.2MB
- MD5
  
  569b8837e675090b6267a8aa90f67363
- SHA1
  
  fb7f2ab70b691ed5479bbd93476c3f58011aa489
- SHA256
  
  22eb5b185959f7e0ecab1269748186ba8c4cb291ebc96ae4475a87dcab4f31ae
- SHA512
  
  e745ca29885918eeb25eeff93b71cc2881d5fab703e1556a488391f0ab2b59b3fab1d35e6f304ada9b09d1249f791c6d4c7098644240b083d3b1d46c181e99e2
- SSDEEP
  
  24576:TC3bqfFwCGoV9wdGzJUEarzoebZkT+RWj+9iKbzl:23bsF/LKQX4biO6TKbB
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery