blackshades | f06547f5cddbc1fefc9e6eccbf0ac75edce601b2b20b1de5bd8bc540194fc94a | Triage

Sharing

General

Target

JaffaCakes118_1cc6566540cf786721e35e57aa8280eb
Size

336KB
Sample

250222-2t8eza1pbr
MD5

1cc6566540cf786721e35e57aa8280eb
SHA1

76e9d90cd58116ce8d8644c35a89e0f6ea475de0
SHA256

f06547f5cddbc1fefc9e6eccbf0ac75edce601b2b20b1de5bd8bc540194fc94a
SHA512

3ef503ea01fe738cf3c6e474fd9f690fcd3ece5dc1451073ad5e81995647da54381ccdb92986f3a1f3dc2561a17c1dc453b6341be866720a2f8865d1228a54c6
SSDEEP

6144:JG78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtc:g7kmAN6omFMb3sGB6UduRfLa

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_1cc6566540cf786721e35e57aa8280eb
- Size
  
  336KB
- MD5
  
  1cc6566540cf786721e35e57aa8280eb
- SHA1
  
  76e9d90cd58116ce8d8644c35a89e0f6ea475de0
- SHA256
  
  f06547f5cddbc1fefc9e6eccbf0ac75edce601b2b20b1de5bd8bc540194fc94a
- SHA512
  
  3ef503ea01fe738cf3c6e474fd9f690fcd3ece5dc1451073ad5e81995647da54381ccdb92986f3a1f3dc2561a17c1dc453b6341be866720a2f8865d1228a54c6
- SSDEEP
  
  6144:JG78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtc:g7kmAN6omFMb3sGB6UduRfLa
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery