blackshades | ac7aeeb43f9acd3e9213192a67fbb7457b85515963383888d85c5cd220739354 | Triage

Sharing

General

Target

JaffaCakes118_8ece90742c8755a207b7795e2426f25d
Size

336KB
Sample

250204-chwvcssrfl
MD5

8ece90742c8755a207b7795e2426f25d
SHA1

9eaed4fdb188ad35b81c76bea27689012d77575b
SHA256

ac7aeeb43f9acd3e9213192a67fbb7457b85515963383888d85c5cd220739354
SHA512

79a59e6eabd0923da3bfd9dc468ec3ca2ff826a88869d00a885f4dbd50a7afbdfe23acbabde9d06ba06eac32bdcccee1c15eb6675ba113e66f40401717fcd0af
SSDEEP

6144:hG78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtcc:o7kmAN6omFMb3sGB6UduRfLac

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_8ece90742c8755a207b7795e2426f25d
- Size
  
  336KB
- MD5
  
  8ece90742c8755a207b7795e2426f25d
- SHA1
  
  9eaed4fdb188ad35b81c76bea27689012d77575b
- SHA256
  
  ac7aeeb43f9acd3e9213192a67fbb7457b85515963383888d85c5cd220739354
- SHA512
  
  79a59e6eabd0923da3bfd9dc468ec3ca2ff826a88869d00a885f4dbd50a7afbdfe23acbabde9d06ba06eac32bdcccee1c15eb6675ba113e66f40401717fcd0af
- SSDEEP
  
  6144:hG78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtcc:o7kmAN6omFMb3sGB6UduRfLac
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery