General
-
Target
JaffaCakes118_72431fbc3f9e8522cd0cde8af124880c
-
Size
367KB
-
Sample
250313-2aba5axlz3
-
MD5
72431fbc3f9e8522cd0cde8af124880c
-
SHA1
5d38f7dad5886a84845892110abf7025f896d326
-
SHA256
0e0592dea74ccd2d810d3eb9cc88757a127934076751b2eb1c6e10e370d44b33
-
SHA512
3e17fdef17427fa7e22f881942cf1cd0c80ce31efa63020e9fc86cca0692fc7533637a7785b5a84fea51708b20d1a35ee409cbb9e402e5e7e852d92571a6622f
-
SSDEEP
6144:W+ySWjNjJ+QheOyTLCy+bL5BcewlANK3pIZUiJbKyRasGzp0X/qIZmAaWD9q:W9SWjJJbe3TLCy+bL5BUANopAbVRSiSV
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_72431fbc3f9e8522cd0cde8af124880c.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_72431fbc3f9e8522cd0cde8af124880c.exe
Resource
win10v2004-20250313-en
Malware Config
Targets
-
-
Target
JaffaCakes118_72431fbc3f9e8522cd0cde8af124880c
-
Size
367KB
-
MD5
72431fbc3f9e8522cd0cde8af124880c
-
SHA1
5d38f7dad5886a84845892110abf7025f896d326
-
SHA256
0e0592dea74ccd2d810d3eb9cc88757a127934076751b2eb1c6e10e370d44b33
-
SHA512
3e17fdef17427fa7e22f881942cf1cd0c80ce31efa63020e9fc86cca0692fc7533637a7785b5a84fea51708b20d1a35ee409cbb9e402e5e7e852d92571a6622f
-
SSDEEP
6144:W+ySWjNjJ+QheOyTLCy+bL5BcewlANK3pIZUiJbKyRasGzp0X/qIZmAaWD9q:W9SWjJJbe3TLCy+bL5BUANopAbVRSiSV
Score10/10-
Blackshades family
-
Blackshades payload
-
Modifies firewall policy service
-
Suspicious use of SetThreadContext
-