Overview

overview

10

Static

static

10

2218a0c526...18.exe

windows7-x64

10

2218a0c526...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2218a0c5268e7e870311f04d56d2792a_JaffaCakes118

  • Size

    994KB

  • Sample

    240507-2xqpbsfd78

  • MD5

    2218a0c5268e7e870311f04d56d2792a

  • SHA1

    0c502806cc2efb3a68287e4813a7a85a9c511a60

  • SHA256

    a79fbedff8cd34a6a5624defca2f478e305586f661d5419459ccf098a060ae8d

  • SHA512

    4f5163e4ba9ff68caca5d24371a84106d5783e0a1682b0241c41e03ac7e5fa5754dc3bb4315d5f0ca99b770a1970ba26e710cb0c46361e759b69c8b293f46ddd

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxI:dJ5gEKNikf3hBfUiWxI

Score
10/10
ammyyadminrat

Malware Config

Targets

    • Target

      2218a0c5268e7e870311f04d56d2792a_JaffaCakes118

    • Size

      994KB

    • MD5

      2218a0c5268e7e870311f04d56d2792a

    • SHA1

      0c502806cc2efb3a68287e4813a7a85a9c511a60

    • SHA256

      a79fbedff8cd34a6a5624defca2f478e305586f661d5419459ccf098a060ae8d

    • SHA512

      4f5163e4ba9ff68caca5d24371a84106d5783e0a1682b0241c41e03ac7e5fa5754dc3bb4315d5f0ca99b770a1970ba26e710cb0c46361e759b69c8b293f46ddd

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxI:dJ5gEKNikf3hBfUiWxI

    Score
    10/10
    ammyyadminrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks