Overview

overview

10

Static

static

10

1c942e01b7...18.exe

windows7-x64

10

1c942e01b7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c942e01b72017dcc88144c2b32b9b40_JaffaCakes118

  • Size

    1012KB

  • Sample

    240506-p4mj2afd56

  • MD5

    1c942e01b72017dcc88144c2b32b9b40

  • SHA1

    965f9a6c973368d7ac5fa28fb0548844e0c5b9b9

  • SHA256

    34751b27079e6e094c273900fcdf42f15350857743c9f3e341a4f32b26188d89

  • SHA512

    6f7195b0311baf6d81c3552e4a47e4e57021a51465f85d1a68d8e40be5c4fe78c87b1396472185dce9cce69ab6c2ba883af7f78c66a432f75849d144f68df9bd

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxo:7J5gEKNikf3hBfUiWxo

Score
10/10
ammyyadminratupx

Malware Config

Targets

    • Target

      1c942e01b72017dcc88144c2b32b9b40_JaffaCakes118

    • Size

      1012KB

    • MD5

      1c942e01b72017dcc88144c2b32b9b40

    • SHA1

      965f9a6c973368d7ac5fa28fb0548844e0c5b9b9

    • SHA256

      34751b27079e6e094c273900fcdf42f15350857743c9f3e341a4f32b26188d89

    • SHA512

      6f7195b0311baf6d81c3552e4a47e4e57021a51465f85d1a68d8e40be5c4fe78c87b1396472185dce9cce69ab6c2ba883af7f78c66a432f75849d144f68df9bd

    • SSDEEP

      24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxo:7J5gEKNikf3hBfUiWxo

    Score
    10/10
    ammyyadminratupx

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks