blackshades | 91f9412e37bb635f2155e1460ac83920762a32a21573e12c9b47a52fa601e52d | Triage

Sharing

General

Target

JaffaCakes118_66c2f3244d7d1a9a006b7cbbc10ca5e5
Size

332KB
Sample

250311-xjsjjsstfx
MD5

66c2f3244d7d1a9a006b7cbbc10ca5e5
SHA1

12fcd7b7d26592ec903adc30d2aa8eed81b7d4d6
SHA256

91f9412e37bb635f2155e1460ac83920762a32a21573e12c9b47a52fa601e52d
SHA512

9bf812add0934cde5c2666f15bff75ec96e04ee1c8174c3bf140f1c7e15ccb74deacf9d01160b8398d8fce27a25fde8f2724f7d22bd76f27ed43100d0612ea0b
SSDEEP

6144:gg9p5vJxymhTFVzWRZvXW1zDLuVbew+AvC:b5vjdRuRBXWhDLuVbew+A6

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_66c2f3244d7d1a9a006b7cbbc10ca5e5
- Size
  
  332KB
- MD5
  
  66c2f3244d7d1a9a006b7cbbc10ca5e5
- SHA1
  
  12fcd7b7d26592ec903adc30d2aa8eed81b7d4d6
- SHA256
  
  91f9412e37bb635f2155e1460ac83920762a32a21573e12c9b47a52fa601e52d
- SHA512
  
  9bf812add0934cde5c2666f15bff75ec96e04ee1c8174c3bf140f1c7e15ccb74deacf9d01160b8398d8fce27a25fde8f2724f7d22bd76f27ed43100d0612ea0b
- SSDEEP
  
  6144:gg9p5vJxymhTFVzWRZvXW1zDLuVbew+AvC:b5vjdRuRBXWhDLuVbew+A6
Score

10^/10

discovery defense_evasion
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscovery