Overview

overview

10

Static

static

3

JaffaCakes...28.exe

windows7-x64

10

JaffaCakes...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a8f0f3a8d4dfec9a24d03566d6f8df28

  • Size

    331KB

  • Sample

    250206-jwmxya1jhj

  • MD5

    a8f0f3a8d4dfec9a24d03566d6f8df28

  • SHA1

    737443ac4c2b8e40f5fc7b56878326279187aeda

  • SHA256

    873d1957beb0ac371df955dfc6ddcc8609ffd208fb96ccb666bace14104f5de5

  • SHA512

    9ae401f32affe2d095bc216142d4da420dca053bb780fcb135e0d9d60607dc4b6b87e52eea7c860693a8a4596f2a46e691e481d7738149d2048656db479ed826

  • SSDEEP

    6144:QoqhznkbfFPwkGZoAk8ONQAU6mOMjxv6FxbC41KtFD:QoHUoBNDfsZ6Fv1

Score
10/10
blackshadesdefense_evasiondiscoverypersistenceratupx

Malware Config

Targets

    • Target

      JaffaCakes118_a8f0f3a8d4dfec9a24d03566d6f8df28

    • Size

      331KB

    • MD5

      a8f0f3a8d4dfec9a24d03566d6f8df28

    • SHA1

      737443ac4c2b8e40f5fc7b56878326279187aeda

    • SHA256

      873d1957beb0ac371df955dfc6ddcc8609ffd208fb96ccb666bace14104f5de5

    • SHA512

      9ae401f32affe2d095bc216142d4da420dca053bb780fcb135e0d9d60607dc4b6b87e52eea7c860693a8a4596f2a46e691e481d7738149d2048656db479ed826

    • SSDEEP

      6144:QoqhznkbfFPwkGZoAk8ONQAU6mOMjxv6FxbC41KtFD:QoHUoBNDfsZ6Fv1

    Score
    10/10
    blackshadesdefense_evasiondiscoverypersistenceratupx

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Adds policy Run key to start application

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks