blackshades | 5cccf029efba0c0478c0e2aaa833ada8c3935281f0f0d2d20278c4bd32123cbb | Triage

Sharing

General

Target

JaffaCakes118_5ebd8fd166e42b55e5318fe948ff95ce
Size

1.6MB
Sample

250130-eznw7aymhy
MD5

5ebd8fd166e42b55e5318fe948ff95ce
SHA1

87942e446821fcbeb2af7c57c744de0deac6e3ac
SHA256

5cccf029efba0c0478c0e2aaa833ada8c3935281f0f0d2d20278c4bd32123cbb
SHA512

d34d36373c37ed3dafe706e2f984639dea3a45fdb10b8daa95eec3aacd7f9fb456919fef7661c98009cf2883acd8bc59c04f6dfbe849b76d87875217efaff1b5
SSDEEP

6144:eCs1ergxnNvP3IZDwZdfZvkASZRHe3/bRnwDHYM6jI7v1Qz9A3LB:eCsErW33UWjMG/9nwDHYM6jI79QzO

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_5ebd8fd166e42b55e5318fe948ff95ce
- Size
  
  1.6MB
- MD5
  
  5ebd8fd166e42b55e5318fe948ff95ce
- SHA1
  
  87942e446821fcbeb2af7c57c744de0deac6e3ac
- SHA256
  
  5cccf029efba0c0478c0e2aaa833ada8c3935281f0f0d2d20278c4bd32123cbb
- SHA512
  
  d34d36373c37ed3dafe706e2f984639dea3a45fdb10b8daa95eec3aacd7f9fb456919fef7661c98009cf2883acd8bc59c04f6dfbe849b76d87875217efaff1b5
- SSDEEP
  
  6144:eCs1ergxnNvP3IZDwZdfZvkASZRHe3/bRnwDHYM6jI7v1Qz9A3LB:eCsErW33UWjMG/9nwDHYM6jI79QzO
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery