Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...bc.exe

windows7-x64

10

JaffaCakes...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_2186e3cbe4e1c1c1dcbe1ef33306c7bc

  • Size

    113KB

  • Sample

    250223-v3arqstjhz

  • MD5

    2186e3cbe4e1c1c1dcbe1ef33306c7bc

  • SHA1

    41836f739b0697dc158b6443804ca8e2a7686ca7

  • SHA256

    96efb6bd9b39c596590c74d2340968460fe64f4de808328b45162c50c056ec12

  • SHA512

    b61b8c292368a0339a96e7e74efa09e44c9f768151e988bfb94c9633bd00296e569673b8b80f205ab56cad82095fcd22c3f895c12ef9f235f14a4a68b92b8109

  • SSDEEP

    3072:tOEY4TjVzg8252TDH+U0p+Cjey9NxOjCzYsKF8t:t1Y4TZg8ZH+U0hj19NxECzYBK

Score
10/10
blackshadesdefense_evasiondiscoveryratupx

Malware Config

Targets

    • Target

      JaffaCakes118_2186e3cbe4e1c1c1dcbe1ef33306c7bc

    • Size

      113KB

    • MD5

      2186e3cbe4e1c1c1dcbe1ef33306c7bc

    • SHA1

      41836f739b0697dc158b6443804ca8e2a7686ca7

    • SHA256

      96efb6bd9b39c596590c74d2340968460fe64f4de808328b45162c50c056ec12

    • SHA512

      b61b8c292368a0339a96e7e74efa09e44c9f768151e988bfb94c9633bd00296e569673b8b80f205ab56cad82095fcd22c3f895c12ef9f235f14a4a68b92b8109

    • SSDEEP

      3072:tOEY4TjVzg8252TDH+U0p+Cjey9NxOjCzYsKF8t:t1Y4TZg8ZH+U0hj19NxECzYBK

    Score
    10/10
    blackshadesdefense_evasiondiscoveryratupx

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks