Overview

overview

10

Static

static

5

JaffaCakes...41.exe

windows7-x64

10

JaffaCakes...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4026bf5e8a2564dad95349ed36382441

  • Size

    229KB

  • Sample

    250302-pehvjstyfw

  • MD5

    4026bf5e8a2564dad95349ed36382441

  • SHA1

    81b870ece00b1b94d939dae73ee5477f37dfef50

  • SHA256

    b2e9c4be09854c63d429a1ba0b461076aecd0356a642151b2ef54b426161e8ee

  • SHA512

    35eeb5add896790b0d2dac2f465f9df01ab87e5c53fc2d6e6890317b6c3370e62b3fd1f7906d4b6bd789186d602d4e2af867a5e918865d8169a38da3cc3d75f3

  • SSDEEP

    6144:t1Y4TZg8ZH+U0hj19NxECzYBKn1Y4TZg8ZH+U0hj19NxECzYBK:tCU+oV0hHNGpBKnCU+oV0hHNGpBK

Score
10/10
blackshadesdefense_evasiondiscoveryratupx

Malware Config

Targets

    • Target

      JaffaCakes118_4026bf5e8a2564dad95349ed36382441

    • Size

      229KB

    • MD5

      4026bf5e8a2564dad95349ed36382441

    • SHA1

      81b870ece00b1b94d939dae73ee5477f37dfef50

    • SHA256

      b2e9c4be09854c63d429a1ba0b461076aecd0356a642151b2ef54b426161e8ee

    • SHA512

      35eeb5add896790b0d2dac2f465f9df01ab87e5c53fc2d6e6890317b6c3370e62b3fd1f7906d4b6bd789186d602d4e2af867a5e918865d8169a38da3cc3d75f3

    • SSDEEP

      6144:t1Y4TZg8ZH+U0hj19NxECzYBKn1Y4TZg8ZH+U0hj19NxECzYBK:tCU+oV0hHNGpBKnCU+oV0hHNGpBK

    Score
    10/10
    blackshadesdefense_evasiondiscoveryratupx

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks