Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...38.exe

windows7-x64

10

JaffaCakes...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_678f84250e21d2dc7927c23e3bc95438

  • Size

    312KB

  • Sample

    250311-175essx1ds

  • MD5

    678f84250e21d2dc7927c23e3bc95438

  • SHA1

    dbde9dec7a98eb2af4e87fab2dc6b896316d34bf

  • SHA256

    9cb73a5c39bf1215f53f3b61dcb367429d58acf18ac3242e212dde2988518a3a

  • SHA512

    28db44a1ff1dd2307993b32d210e17adef51e8f8fbd13428f3c422b6fd366355c1089c5eefdae79633b94e71cbe687756203188cbccd40fb2c04387200fb28d9

  • SSDEEP

    6144:8nAe1MAcy3jXFDdkbv4ATq4/UHIAKdG5+HEXQ9HmKH9:8nA8VHVDdkbAAu25dG5idth9

Score
10/10
blackshadesdefense_evasiondiscoveryratupx

Malware Config

Targets

    • Target

      JaffaCakes118_678f84250e21d2dc7927c23e3bc95438

    • Size

      312KB

    • MD5

      678f84250e21d2dc7927c23e3bc95438

    • SHA1

      dbde9dec7a98eb2af4e87fab2dc6b896316d34bf

    • SHA256

      9cb73a5c39bf1215f53f3b61dcb367429d58acf18ac3242e212dde2988518a3a

    • SHA512

      28db44a1ff1dd2307993b32d210e17adef51e8f8fbd13428f3c422b6fd366355c1089c5eefdae79633b94e71cbe687756203188cbccd40fb2c04387200fb28d9

    • SSDEEP

      6144:8nAe1MAcy3jXFDdkbv4ATq4/UHIAKdG5+HEXQ9HmKH9:8nA8VHVDdkbAAu25dG5idth9

    Score
    10/10
    blackshadesdefense_evasiondiscoveryratupx

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Drops startup file

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks