Overview

overview

10

Static

static

3

JaffaCakes...6c.exe

windows7-x64

10

JaffaCakes...6c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_47905240f94b6d39e96d68ea9b73166c

  • Size

    653KB

  • Sample

    250303-r5dpma1jt8

  • MD5

    47905240f94b6d39e96d68ea9b73166c

  • SHA1

    212aa659f181abfce24d39a4b986349d51e72836

  • SHA256

    997a2d2c333b1aa6251fc54d600130044ece7ed84e64d3a210848c045fca080c

  • SHA512

    e717cb1532938f3e8b80c622a2c53a9ff4c7111cbf424e2050a5c96658e4493452d5922ee60fc12e1e4e68b7cc4076a77d13da2ffbf9ad0a600944a4e2c17567

  • SSDEEP

    12288:USy6Hr8InApopMuG9JWOqfK2un5GHNzT41IDuRBovTAQ2PkiKWy9H4pTH+n+fX:dL8IA2pIvqd81IC3ovkKWy9+vP

Score
10/10
blackshadesdefense_evasiondiscoveryrattrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_47905240f94b6d39e96d68ea9b73166c

    • Size

      653KB

    • MD5

      47905240f94b6d39e96d68ea9b73166c

    • SHA1

      212aa659f181abfce24d39a4b986349d51e72836

    • SHA256

      997a2d2c333b1aa6251fc54d600130044ece7ed84e64d3a210848c045fca080c

    • SHA512

      e717cb1532938f3e8b80c622a2c53a9ff4c7111cbf424e2050a5c96658e4493452d5922ee60fc12e1e4e68b7cc4076a77d13da2ffbf9ad0a600944a4e2c17567

    • SSDEEP

      12288:USy6Hr8InApopMuG9JWOqfK2un5GHNzT41IDuRBovTAQ2PkiKWy9H4pTH+n+fX:dL8IA2pIvqd81IC3ovkKWy9+vP

    Score
    10/10
    blackshadesdefense_evasiondiscoveryrattrojanupx

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks