Overview

overview

10

Static

static

3

2025-03-06...ia.exe

windows7-x64

10

2025-03-06...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-06_4227332b546488c03ab51bf00b145751_karagany_mafia

  • Size

    305KB

  • Sample

    250306-xjp4eswjv8

  • MD5

    4227332b546488c03ab51bf00b145751

  • SHA1

    2b37adfee87e7de962daddeed319c9cf7229216a

  • SHA256

    ec00e3fe0c533f2ade7ff814d08ef6846e27754b9910f6dbb2e49d0174e829e4

  • SHA512

    5173f38fda4cd9aad8a3d9827255114c0652f480ffccefb0f4efaf091fdfa9c8df7fddae2b4774462266a3bc9e45085b45616d906349b1ed0a93512988254b03

  • SSDEEP

    6144:lHUhybzwjzkPmO6r7ib3tMbZ3suspx4xSOuJmeMHDhy:l0hUUjYV+ibekpx4OmeiDhy

Score
10/10
blackshadesdefense_evasiondiscoveryratupx

Malware Config

Targets

    • Target

      2025-03-06_4227332b546488c03ab51bf00b145751_karagany_mafia

    • Size

      305KB

    • MD5

      4227332b546488c03ab51bf00b145751

    • SHA1

      2b37adfee87e7de962daddeed319c9cf7229216a

    • SHA256

      ec00e3fe0c533f2ade7ff814d08ef6846e27754b9910f6dbb2e49d0174e829e4

    • SHA512

      5173f38fda4cd9aad8a3d9827255114c0652f480ffccefb0f4efaf091fdfa9c8df7fddae2b4774462266a3bc9e45085b45616d906349b1ed0a93512988254b03

    • SSDEEP

      6144:lHUhybzwjzkPmO6r7ib3tMbZ3suspx4xSOuJmeMHDhy:l0hUUjYV+ibekpx4OmeiDhy

    Score
    10/10
    blackshadesdefense_evasiondiscoveryratupx

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks