blackshades | 63374f345942d7afa0ff9d54f360525cc1b11b1a6a78f53612973dbf646d2549 | Triage

Sharing

General

Target

JaffaCakes118_9f5b73d693ce3216672d03ab07dd7ea5
Size

1.1MB
Sample

250407-qzg97a1vaw
MD5

9f5b73d693ce3216672d03ab07dd7ea5
SHA1

c06441d12ccc651ceb41c543553165f6561383c8
SHA256

63374f345942d7afa0ff9d54f360525cc1b11b1a6a78f53612973dbf646d2549
SHA512

4c3d87bde877eface5c5b4c5daf87cd25e271ce3d1f9bfddf02a1b51d9a320a3f1b2cb4ca06a615b2f06b6e7fcd08410d919579271ccb4cde7cbbc4c142dc6ad
SSDEEP

24576:h5Y8WP5oudlRLl3hP13iM40oh7kt3nuGz:BWP5oAlbNpii90Gz

Score

10^/10

blackshades defense_evasion discovery persistence rat

Malware Config

Targets

- Target
  
  JaffaCakes118_9f5b73d693ce3216672d03ab07dd7ea5
- Size
  
  1.1MB
- MD5
  
  9f5b73d693ce3216672d03ab07dd7ea5
- SHA1
  
  c06441d12ccc651ceb41c543553165f6561383c8
- SHA256
  
  63374f345942d7afa0ff9d54f360525cc1b11b1a6a78f53612973dbf646d2549
- SHA512
  
  4c3d87bde877eface5c5b4c5daf87cd25e271ce3d1f9bfddf02a1b51d9a320a3f1b2cb4ca06a615b2f06b6e7fcd08410d919579271ccb4cde7cbbc4c142dc6ad
- SSDEEP
  
  24576:h5Y8WP5oudlRLl3hP13iM40oh7kt3nuGz:BWP5oAlbNpii90Gz
Score

10^/10

blackshades defense_evasion discovery persistence rat
- Blackshades
  Blackshades is a remote access trojan with various capabilities.
  rat blackshades
- Blackshades family
  blackshades
- Blackshades payload
- Modifies firewall policy service
  defense_evasion
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackshadesdefense_evasiondiscoverypersistencerat