Overview

overview

10

Static

static

10

0aec2c26df...18.exe

windows7-x64

10

0aec2c26df...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0aec2c26dfeda66721313e8666d3edd0_JaffaCakes118

  • Size

    998KB

  • Sample

    240501-c5w4msga84

  • MD5

    0aec2c26dfeda66721313e8666d3edd0

  • SHA1

    b6cd5ac8a17e52422fd6ba0eb7786758a8491c14

  • SHA256

    6b83890e57f90e2027ddb6560abef71bfc5e1794934c321ee92c836238bd21c1

  • SHA512

    fc88e1ecb73798bfd68abb99a817bfd05bfe3c9d17c85021232b01638c9f91a9a2c9fc97bd62b8766be66f7165c62b60a6e12c31193d195aa979c3fa693c3999

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxa:dJ5gEKNikf3hBfUiWxa

Score
10/10
ammyyadminrat

Malware Config

Targets

    • Target

      0aec2c26dfeda66721313e8666d3edd0_JaffaCakes118

    • Size

      998KB

    • MD5

      0aec2c26dfeda66721313e8666d3edd0

    • SHA1

      b6cd5ac8a17e52422fd6ba0eb7786758a8491c14

    • SHA256

      6b83890e57f90e2027ddb6560abef71bfc5e1794934c321ee92c836238bd21c1

    • SHA512

      fc88e1ecb73798bfd68abb99a817bfd05bfe3c9d17c85021232b01638c9f91a9a2c9fc97bd62b8766be66f7165c62b60a6e12c31193d195aa979c3fa693c3999

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxa:dJ5gEKNikf3hBfUiWxa

    Score
    10/10
    ammyyadminrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks