blackshades | 1dd2f14b0f3398c5819af98e3db9c1ad74e1a2f2c0bc429f5d1d103bb2dcbb00 | Triage

Sharing

General

Target

JaffaCakes118_3146df1c381b7eca00b00eb16437089a
Size

336KB
Sample

250228-dyqhyszqw7
MD5

3146df1c381b7eca00b00eb16437089a
SHA1

ea545d4ced90512c7b84cfc1fbf0a4017c58801c
SHA256

1dd2f14b0f3398c5819af98e3db9c1ad74e1a2f2c0bc429f5d1d103bb2dcbb00
SHA512

464c64f45d682ecb58b4f74d2ee51335f610c6bc1c53c01dd98b9b459766976cabd0110761372e3f6f79a7b05b3864c1758ab5c6d0bc26c017e856361b6d2029
SSDEEP

6144:FG78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtcR:07kmAN6omFMb3sGB6UduRfLaR

Score

10^/10

blackshades defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  JaffaCakes118_3146df1c381b7eca00b00eb16437089a
- Size
  
  336KB
- MD5
  
  3146df1c381b7eca00b00eb16437089a
- SHA1
  
  ea545d4ced90512c7b84cfc1fbf0a4017c58801c
- SHA256
  
  1dd2f14b0f3398c5819af98e3db9c1ad74e1a2f2c0bc429f5d1d103bb2dcbb00
- SHA512
  
  464c64f45d682ecb58b4f74d2ee51335f610c6bc1c53c01dd98b9b459766976cabd0110761372e3f6f79a7b05b3864c1758ab5c6d0bc26c017e856361b6d2029
- SSDEEP
  
  6144:FG78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtcR:07kmAN6omFMb3sGB6UduRfLaR
Score

10^/10

defense_evasion discovery persistence
- Modifies firewall policy service
  defense_evasion
- Adds policy Run key to start application
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence