blackshades | 9b09322db14e46f87c9ca53b1ea291576d6b25be37582fab8d05664037bbc824 | Triage

Sharing

General

Target

JaffaCakes118_6ade719c71467e9f8565e9a72c1b29c1
Size

448KB
Sample

250131-rbbyyaxnbt
MD5

6ade719c71467e9f8565e9a72c1b29c1
SHA1

3cbcbd872bdc68d913a7d4e1e3cc9eed7c2dcb1a
SHA256

9b09322db14e46f87c9ca53b1ea291576d6b25be37582fab8d05664037bbc824
SHA512

5fffcde66c27dc58e5e6d7e2199788e9c6e1a26c91f9904afbaef8fb820bf191ff870e80a9d1306b2b0fcc57a4f857b2245c3e1042019a569d823c9aa72b9eb3
SSDEEP

6144:jh5IjKmFs4Hb4I2HIEi+nPHawdn0/JRSerTWIdeFjkZM6jI7F1eZ9A3d:d5IjKCsC4IsKRFqIQFjkZM6jI7TeZe

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_6ade719c71467e9f8565e9a72c1b29c1
- Size
  
  448KB
- MD5
  
  6ade719c71467e9f8565e9a72c1b29c1
- SHA1
  
  3cbcbd872bdc68d913a7d4e1e3cc9eed7c2dcb1a
- SHA256
  
  9b09322db14e46f87c9ca53b1ea291576d6b25be37582fab8d05664037bbc824
- SHA512
  
  5fffcde66c27dc58e5e6d7e2199788e9c6e1a26c91f9904afbaef8fb820bf191ff870e80a9d1306b2b0fcc57a4f857b2245c3e1042019a569d823c9aa72b9eb3
- SSDEEP
  
  6144:jh5IjKmFs4Hb4I2HIEi+nPHawdn0/JRSerTWIdeFjkZM6jI7F1eZ9A3d:d5IjKCsC4IsKRFqIQFjkZM6jI7TeZe
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery