blackshades | 36b65180315a7322ef822c70ae9816e5a4eee01d5c2d2e0719a9f6874cac77e6 | Triage

Sharing

General

Target

36b65180315a7322ef822c70ae9816e5a4eee01d5c2d2e0719a9f6874cac77e6
Size

420KB
Sample

250219-1xmf8szmdy
MD5

d1939b780e1f9f4b3c4534fc13a72148
SHA1

81032647830f3a0d9e3fd26fde0bd5fdf485f06d
SHA256

36b65180315a7322ef822c70ae9816e5a4eee01d5c2d2e0719a9f6874cac77e6
SHA512

3313e65e605364cc7e659183819bf55a8ee61b5f4c29d2dc5f3883591e19fb897acd9f62aaa0c98985965d7fba25a66c190dad6b9d032a06e52642d38cb9fa72
SSDEEP

6144:wK3HTNGVvHI2zBHng5HaVsbZgRnyR4mULJhkHM6jI7H1D7puVSu:P3HcVvo21ga0aQ4HLJhkHM6jI7VD7wP

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  36b65180315a7322ef822c70ae9816e5a4eee01d5c2d2e0719a9f6874cac77e6
- Size
  
  420KB
- MD5
  
  d1939b780e1f9f4b3c4534fc13a72148
- SHA1
  
  81032647830f3a0d9e3fd26fde0bd5fdf485f06d
- SHA256
  
  36b65180315a7322ef822c70ae9816e5a4eee01d5c2d2e0719a9f6874cac77e6
- SHA512
  
  3313e65e605364cc7e659183819bf55a8ee61b5f4c29d2dc5f3883591e19fb897acd9f62aaa0c98985965d7fba25a66c190dad6b9d032a06e52642d38cb9fa72
- SSDEEP
  
  6144:wK3HTNGVvHI2zBHng5HaVsbZgRnyR4mULJhkHM6jI7H1D7puVSu:P3HcVvo21ga0aQ4HLJhkHM6jI7VD7wP
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery