Overview

overview

10

Static

static

3

jaffacakes...ow.exe

windows10-2004-x64

10

jaffacakes...ow.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_Backdoor.Win32.Bifrose.dxow.d1dc3edd94085790a1b6ff79cca196d2
  • Size 388KB
  • Sample261016-my85qsstav
  • SHA256 bd63e50c824afd99d4bb29e3857e80b472bae6f0bf5ddb784e71e6290f6134d0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
blackshadesdefense_evasiondiscoveryexecutionrat

Malware Config

Targets

    • Target
      jaffacakes118_Backdoor.Win32.Bifrose.dxow.d1dc3edd94085790a1b6ff79cca196d2
    • Size 388KB
    • SHA256 bd63e50c824afd99d4bb29e3857e80b472bae6f0bf5ddb784e71e6290f6134d0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutionblackshadesrat

    • Blackshades payload

    • Family: Blackshades

      Blackshades is a remote access trojan with various capabilities.

      ratblackshades

    • Modifies firewall policy service

      defense_evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks