General

  • Target

    JaffaCakes118_72431fbc3f9e8522cd0cde8af124880c

  • Size

    367KB

  • Sample

    250313-2aba5axlz3

  • MD5

    72431fbc3f9e8522cd0cde8af124880c

  • SHA1

    5d38f7dad5886a84845892110abf7025f896d326

  • SHA256

    0e0592dea74ccd2d810d3eb9cc88757a127934076751b2eb1c6e10e370d44b33

  • SHA512

    3e17fdef17427fa7e22f881942cf1cd0c80ce31efa63020e9fc86cca0692fc7533637a7785b5a84fea51708b20d1a35ee409cbb9e402e5e7e852d92571a6622f

  • SSDEEP

    6144:W+ySWjNjJ+QheOyTLCy+bL5BcewlANK3pIZUiJbKyRasGzp0X/qIZmAaWD9q:W9SWjJJbe3TLCy+bL5BUANopAbVRSiSV

Malware Config

Targets

    • Target

      JaffaCakes118_72431fbc3f9e8522cd0cde8af124880c

    • Size

      367KB

    • MD5

      72431fbc3f9e8522cd0cde8af124880c

    • SHA1

      5d38f7dad5886a84845892110abf7025f896d326

    • SHA256

      0e0592dea74ccd2d810d3eb9cc88757a127934076751b2eb1c6e10e370d44b33

    • SHA512

      3e17fdef17427fa7e22f881942cf1cd0c80ce31efa63020e9fc86cca0692fc7533637a7785b5a84fea51708b20d1a35ee409cbb9e402e5e7e852d92571a6622f

    • SSDEEP

      6144:W+ySWjNjJ+QheOyTLCy+bL5BcewlANK3pIZUiJbKyRasGzp0X/qIZmAaWD9q:W9SWjJJbe3TLCy+bL5BUANopAbVRSiSV

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

    • Blackshades family

    • Blackshades payload

    • Modifies firewall policy service

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks