Overview

overview

10

Static

static

3

JaffaCakes...5c.exe

windows7-x64

10

JaffaCakes...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_612709055529f4689b40b6ab8d9e285c

  • Size

    361KB

  • Sample

    250130-k97d6sypdp

  • MD5

    612709055529f4689b40b6ab8d9e285c

  • SHA1

    14f2778d6033c24e876cf104b3f853ab6cf8c8be

  • SHA256

    e109caef4a67ae961efce78e642253e580db233bc19e982d6743c8bc5343027b

  • SHA512

    330770e76e0499cd37a5dd57a73ec2439ba007a1399f0a0e210b81a4681e6961ef977f6d60383ef84a9897a08964c247a1418f4bd966a575e7606750e2f8e752

  • SSDEEP

    6144:RYhHdanjQ7VZDpTUix1d7lhwLESM+xkgunOoCkmDONweCTaavwocJB6rGkbXtJVD:ah9OjQ7VZD2ixlhEES/xtYOoC3OWeCFn

Score
10/10
blackshadesdefense_evasiondiscoverypersistencerat

Malware Config

Targets

    • Target

      JaffaCakes118_612709055529f4689b40b6ab8d9e285c

    • Size

      361KB

    • MD5

      612709055529f4689b40b6ab8d9e285c

    • SHA1

      14f2778d6033c24e876cf104b3f853ab6cf8c8be

    • SHA256

      e109caef4a67ae961efce78e642253e580db233bc19e982d6743c8bc5343027b

    • SHA512

      330770e76e0499cd37a5dd57a73ec2439ba007a1399f0a0e210b81a4681e6961ef977f6d60383ef84a9897a08964c247a1418f4bd966a575e7606750e2f8e752

    • SSDEEP

      6144:RYhHdanjQ7VZDpTUix1d7lhwLESM+xkgunOoCkmDONweCTaavwocJB6rGkbXtJVD:ah9OjQ7VZD2ixlhEES/xtYOoC3OWeCFn

    Score
    10/10
    blackshadesdefense_evasiondiscoverypersistencerat

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Adds policy Run key to start application

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks