Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...11.exe

windows7-x64

10

JaffaCakes...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_64248c7195c6f3b0fe05b3b018799d11

  • Size

    456KB

  • Sample

    250311-jze2haxjz6

  • MD5

    64248c7195c6f3b0fe05b3b018799d11

  • SHA1

    2e9f99a936823b13f4d4aaab5dd282e83480f988

  • SHA256

    df22f6fee1722b4e016394f45c745948ac3622973fb5662f74f7d7bf6287942f

  • SHA512

    462ada83611f85cc06c80930e206bad1efd6be80aaa750c946c08e8a4b1e23567a062f3faa02c653dd366eec62111975f23d37741ab7fad7572d2bfb34d1cb67

  • SSDEEP

    12288:qqy6m/BCfGKEQA0cUH2VMCAlMl8Ynnnul7u5GDh9OLJDyiLBHnnnHpEJNOfEDhNf:C6m/BCfGKEQA0cUH2VMCAlrYnnnul7u0

Score
10/10
blackshadesdefense_evasiondiscoveryrat

Malware Config

Targets

    • Target

      JaffaCakes118_64248c7195c6f3b0fe05b3b018799d11

    • Size

      456KB

    • MD5

      64248c7195c6f3b0fe05b3b018799d11

    • SHA1

      2e9f99a936823b13f4d4aaab5dd282e83480f988

    • SHA256

      df22f6fee1722b4e016394f45c745948ac3622973fb5662f74f7d7bf6287942f

    • SHA512

      462ada83611f85cc06c80930e206bad1efd6be80aaa750c946c08e8a4b1e23567a062f3faa02c653dd366eec62111975f23d37741ab7fad7572d2bfb34d1cb67

    • SSDEEP

      12288:qqy6m/BCfGKEQA0cUH2VMCAlMl8Ynnnul7u5GDh9OLJDyiLBHnnnHpEJNOfEDhNf:C6m/BCfGKEQA0cUH2VMCAlrYnnnul7u0

    Score
    10/10
    blackshadesdefense_evasiondiscoveryrat

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Blackshades family

      blackshades

    • Blackshades payload

    • Modifies firewall policy service

      defense_evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks