blackshades | 435f0ecc165e72b6365e8dad2a64d20ba966236fdb2895a716d8cf16b670c6f6 | Triage

Sharing

General

Target

JaffaCakes118_1da13e828790c04b44621e7c9eb627db
Size

420KB
Sample

250223-b3hb2atlcw
MD5

1da13e828790c04b44621e7c9eb627db
SHA1

8e390e6db1ef15af3bb8d8828da781b6cca4da6f
SHA256

435f0ecc165e72b6365e8dad2a64d20ba966236fdb2895a716d8cf16b670c6f6
SHA512

357b2d5a81b4888e540d80db74e5d44ba333a22bca50a7a1ec34663a9aa332e164102e94cf7137e80eea6fd5f793712fe67db1ddac2ee9f98432707fe143224f
SSDEEP

6144:zK3HTNGVvHI2zBHng5HaVsbZgRnyR4mULJhkHM6jI7H1D7puVSK:23HcVvo21ga0aQ4HLJhkHM6jI7VD7wT

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_1da13e828790c04b44621e7c9eb627db
- Size
  
  420KB
- MD5
  
  1da13e828790c04b44621e7c9eb627db
- SHA1
  
  8e390e6db1ef15af3bb8d8828da781b6cca4da6f
- SHA256
  
  435f0ecc165e72b6365e8dad2a64d20ba966236fdb2895a716d8cf16b670c6f6
- SHA512
  
  357b2d5a81b4888e540d80db74e5d44ba333a22bca50a7a1ec34663a9aa332e164102e94cf7137e80eea6fd5f793712fe67db1ddac2ee9f98432707fe143224f
- SSDEEP
  
  6144:zK3HTNGVvHI2zBHng5HaVsbZgRnyR4mULJhkHM6jI7H1D7puVSK:23HcVvo21ga0aQ4HLJhkHM6jI7VD7wT
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery