Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...ed.exe

windows7-x64

10

JaffaCakes...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1cd1f4b22943ca619c0133f92e5b00ed

  • Size

    179KB

  • Sample

    250222-2z2jls1jev

  • MD5

    1cd1f4b22943ca619c0133f92e5b00ed

  • SHA1

    3a0f7f6dd599aea2c3646d75fa3cda585add3092

  • SHA256

    cc48f61cb0aeeb15e87d9543acff36ff98a33c33ad3af884e15f00f7690bfb87

  • SHA512

    e42a0096c4359473e40a24e52a4afbace80b1a7652102577872e20e6b289d7f18a7bdcfa7fce6b120b474a717927a04d65fa13b4cd71a1d6606ab46d38b42b55

  • SSDEEP

    3072:LiqHuRsodQz11vcnJk2VTfir99iN0JZWeUVl+c:PORsXzbvMJ/Y9ieUVF

Score
10/10
blackshadesdefense_evasiondiscoveryratupx

Malware Config

Targets

    • Target

      JaffaCakes118_1cd1f4b22943ca619c0133f92e5b00ed

    • Size

      179KB

    • MD5

      1cd1f4b22943ca619c0133f92e5b00ed

    • SHA1

      3a0f7f6dd599aea2c3646d75fa3cda585add3092

    • SHA256

      cc48f61cb0aeeb15e87d9543acff36ff98a33c33ad3af884e15f00f7690bfb87

    • SHA512

      e42a0096c4359473e40a24e52a4afbace80b1a7652102577872e20e6b289d7f18a7bdcfa7fce6b120b474a717927a04d65fa13b4cd71a1d6606ab46d38b42b55

    • SSDEEP

      3072:LiqHuRsodQz11vcnJk2VTfir99iN0JZWeUVl+c:PORsXzbvMJ/Y9ieUVF

    Score
    10/10
    blackshadesdefense_evasiondiscoveryratupx

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks