blackshades | 638c64668cca58e58bf550312307e80d8f4f91e4275f47c7fe645daae47bb8ac | Triage

Sharing

General

Target

JaffaCakes118_97226907a3d10449469e99f7e387f0fe
Size

488KB
Sample

250329-yw71fazvet
MD5

97226907a3d10449469e99f7e387f0fe
SHA1

4d1f100ce61ba5f19f6ad400e94351de7506e6ae
SHA256

638c64668cca58e58bf550312307e80d8f4f91e4275f47c7fe645daae47bb8ac
SHA512

803f6eee2d1997e79afb3695a78933924cae9d499d241b4cef6171b0b814fcb0a5ffc80eb988d4ebd43a211da5234bab01ea903a6e86cde53153802b856f130e
SSDEEP

6144:k7piDN+S7md4UBHng5Ha/xrV8vJBQISKMqK/RPQGRc3+vLrKAq6Oe:KUD1m+YgatSbnMqK/RPQGRc3+vXy6Oe

Score

10^/10

blackshades defense_evasion discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_97226907a3d10449469e99f7e387f0fe
- Size
  
  488KB
- MD5
  
  97226907a3d10449469e99f7e387f0fe
- SHA1
  
  4d1f100ce61ba5f19f6ad400e94351de7506e6ae
- SHA256
  
  638c64668cca58e58bf550312307e80d8f4f91e4275f47c7fe645daae47bb8ac
- SHA512
  
  803f6eee2d1997e79afb3695a78933924cae9d499d241b4cef6171b0b814fcb0a5ffc80eb988d4ebd43a211da5234bab01ea903a6e86cde53153802b856f130e
- SSDEEP
  
  6144:k7piDN+S7md4UBHng5Ha/xrV8vJBQISKMqK/RPQGRc3+vLrKAq6Oe:KUD1m+YgatSbnMqK/RPQGRc3+vXy6Oe
Score

10^/10

defense_evasion discovery
- Modifies firewall policy service
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery