Analysis

  • max time kernel
    119s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    25/02/2025, 06:34

General

  • Target

    1d8c19c027ab0ad405b9a705478b14275038448deffa462d6362e4cce598bfb5.exe

  • Size

    364KB

  • MD5

    fb39f6e064ec43780808cf67963a8193

  • SHA1

    8ca4f3529d01e1faab9e34acdf0efa8960092eb3

  • SHA256

    1d8c19c027ab0ad405b9a705478b14275038448deffa462d6362e4cce598bfb5

  • SHA512

    06b2a4e265ec3932ce1fe2365163e5fdbd165a6a734844dbbcfe60436cf2b903a97c78ee5127ab337adf45db4a1a6b4d10d4fc0df20e032e1e77dceed12fa03a

  • SSDEEP

    6144:Yiu0srKxP6nVMg1FENy/V/5c6thb+lazG8sbNoS0:Y50srcyLjN/5c6thb+lazGfRoS0

Score
10/10

Malware Config

Signatures

  • Blackshades

    Blackshades is a remote access trojan with various capabilities.

  • Blackshades family
  • Blackshades payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1d8c19c027ab0ad405b9a705478b14275038448deffa462d6362e4cce598bfb5.exe
    "C:\Users\Admin\AppData\Local\Temp\1d8c19c027ab0ad405b9a705478b14275038448deffa462d6362e4cce598bfb5.exe"
    1⤵
      PID:2780

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2780-0-0x0000000000400000-0x000000000045D000-memory.dmp

      Filesize

      372KB