Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...87.exe

windows7-x64

10

JaffaCakes...87.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0fed20648d736052db384f5d7834e287

  • Size

    496KB

  • Sample

    250221-dylvrs1phy

  • MD5

    0fed20648d736052db384f5d7834e287

  • SHA1

    2411e15fcbc261c9e3815e6d937cc768010ce6ca

  • SHA256

    843cc91c63b92c5fb1d332781e3b7e062350f9fef1a2e2999097cfc1154ae4a9

  • SHA512

    de76d007ee4170989474153854cb2f8c0bac8733ceae66a26307827442c13e9c06d07ab773045cfadcfa3ac2fe6f2b740a1581e009dd52028f27de06e6ff16f2

  • SSDEEP

    12288:eDCBL8JL9fRhYorKYe9aVVyeTc+M2y2tPTmnVi:es8wNpWyfujs

Score
10/10
blackshadesdefense_evasiondiscoveryrat

Malware Config

Targets

    • Target

      JaffaCakes118_0fed20648d736052db384f5d7834e287

    • Size

      496KB

    • MD5

      0fed20648d736052db384f5d7834e287

    • SHA1

      2411e15fcbc261c9e3815e6d937cc768010ce6ca

    • SHA256

      843cc91c63b92c5fb1d332781e3b7e062350f9fef1a2e2999097cfc1154ae4a9

    • SHA512

      de76d007ee4170989474153854cb2f8c0bac8733ceae66a26307827442c13e9c06d07ab773045cfadcfa3ac2fe6f2b740a1581e009dd52028f27de06e6ff16f2

    • SSDEEP

      12288:eDCBL8JL9fRhYorKYe9aVVyeTc+M2y2tPTmnVi:es8wNpWyfujs

    Score
    10/10
    blackshadesdefense_evasiondiscoveryrat

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks