Overview

overview

10

Static

static

10

0beedf0af8...18.exe

windows7-x64

10

0beedf0af8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0beedf0af80e94f5302f607cb2f6975d_JaffaCakes118

  • Size

    994KB

  • Sample

    240501-qxvshaga7v

  • MD5

    0beedf0af80e94f5302f607cb2f6975d

  • SHA1

    d057098b5cfdf7317f81a5049e4996fdb038c2cf

  • SHA256

    9af7a38f538f74cda293228f4a82897eda192ba2218f14e528d01aa434eb8ca0

  • SHA512

    3d09cf6d22d3c80f7a1dd67649278029151eca8b5632fe99d1fce3f8f0b1bf4e085a7895c30f23368511aa71ece354e778d941ba2fd9a9875aef4bd21f72f6f6

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxG:dJ5gEKNikf3hBfUiWxG

Score
10/10
ammyyadminrat

Malware Config

Targets

    • Target

      0beedf0af80e94f5302f607cb2f6975d_JaffaCakes118

    • Size

      994KB

    • MD5

      0beedf0af80e94f5302f607cb2f6975d

    • SHA1

      d057098b5cfdf7317f81a5049e4996fdb038c2cf

    • SHA256

      9af7a38f538f74cda293228f4a82897eda192ba2218f14e528d01aa434eb8ca0

    • SHA512

      3d09cf6d22d3c80f7a1dd67649278029151eca8b5632fe99d1fce3f8f0b1bf4e085a7895c30f23368511aa71ece354e778d941ba2fd9a9875aef4bd21f72f6f6

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxG:dJ5gEKNikf3hBfUiWxG

    Score
    10/10
    ammyyadminrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks