Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...9e.exe

windows7-x64

10

JaffaCakes...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_21975899b65652222255a5c663a34b9e

  • Size

    596KB

  • Sample

    250223-wp9vcatndz

  • MD5

    21975899b65652222255a5c663a34b9e

  • SHA1

    7669700d05191542e4086ad6e0edcb20ca5794c8

  • SHA256

    6907c8a0c3e6fb03fde042da76510e8a002eea4ec3b67a1e32eb35202299aae2

  • SHA512

    9ac91e48455f9f04df39c344b9ae9a6263d4cfecca3597b2b64e24ca3ef722606c314d53f6a65e6299e83815b27f819b4915cebed6fde04a5293be6b82be7ea7

  • SSDEEP

    12288:RV9YMRAECWNUNc2+L0TOeJJ3zxOeZ4yrfYMe1nig:RV2cUx+L0ZLjOWxIn

Score
10/10
blackshadesdefense_evasiondiscoveryrat

Malware Config

Targets

    • Target

      JaffaCakes118_21975899b65652222255a5c663a34b9e

    • Size

      596KB

    • MD5

      21975899b65652222255a5c663a34b9e

    • SHA1

      7669700d05191542e4086ad6e0edcb20ca5794c8

    • SHA256

      6907c8a0c3e6fb03fde042da76510e8a002eea4ec3b67a1e32eb35202299aae2

    • SHA512

      9ac91e48455f9f04df39c344b9ae9a6263d4cfecca3597b2b64e24ca3ef722606c314d53f6a65e6299e83815b27f819b4915cebed6fde04a5293be6b82be7ea7

    • SSDEEP

      12288:RV9YMRAECWNUNc2+L0TOeJJ3zxOeZ4yrfYMe1nig:RV2cUx+L0ZLjOWxIn

    Score
    10/10
    blackshadesdefense_evasiondiscoveryrat

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks