blackshades | 2308aa65f6312fa81e82bc345c1e219517b5596a8b0470f51de9a6a57f7ad16a | Triage

Sharing

General

Target

JaffaCakes118_6fbc6ed2d1570ec735bb8a5b6cd124e9
Size

420KB
Sample

250313-j9qwra1ta1
MD5

6fbc6ed2d1570ec735bb8a5b6cd124e9
SHA1

f0c9f75b01e5676d7e4983ace6a43b230b98682d
SHA256

2308aa65f6312fa81e82bc345c1e219517b5596a8b0470f51de9a6a57f7ad16a
SHA512

300ea880f4bf247d0d7a6ec4aa6ad3f6847b794bf94c01640fea6d3fff6bd06919d608f10c11de3e45c8d7bd7851dde1e5c20d23c9468238b3bda50dbc5c4035
SSDEEP

6144:KfZivnaPAQ6BHng5HaqGg779vT/pQNCbw9q4uo0v5l/3ygr:KRYnpQWga611QEbw9q4uo0v5lvH

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_6fbc6ed2d1570ec735bb8a5b6cd124e9
- Size
  
  420KB
- MD5
  
  6fbc6ed2d1570ec735bb8a5b6cd124e9
- SHA1
  
  f0c9f75b01e5676d7e4983ace6a43b230b98682d
- SHA256
  
  2308aa65f6312fa81e82bc345c1e219517b5596a8b0470f51de9a6a57f7ad16a
- SHA512
  
  300ea880f4bf247d0d7a6ec4aa6ad3f6847b794bf94c01640fea6d3fff6bd06919d608f10c11de3e45c8d7bd7851dde1e5c20d23c9468238b3bda50dbc5c4035
- SSDEEP
  
  6144:KfZivnaPAQ6BHng5HaqGg779vT/pQNCbw9q4uo0v5l/3ygr:KRYnpQWga611QEbw9q4uo0v5lvH
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery