Overview

overview

10

Static

static

10

201edd53b6...18.exe

windows7-x64

10

201edd53b6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    201edd53b6970f4cd5349e70dede8a55_JaffaCakes118

  • Size

    994KB

  • Sample

    240507-k1d19scc97

  • MD5

    201edd53b6970f4cd5349e70dede8a55

  • SHA1

    05b9a7da60c577df586662601fbc51f79ec53890

  • SHA256

    76f7f817f2dc5037e33f9941efb136b96fec2ba19e6da21aeb7ca36f8be95389

  • SHA512

    3620ed96a26f25d0a2ccb4ad293654b6b7ad4b746397c4ef9bd7d91f770ecceda21ca653769eb9f441915360fc151e5ed27dabbe02552afb812b86becb2170ca

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxb:dJ5gEKNikf3hBfUiWxb

Score
10/10
ammyyadminrat

Malware Config

Targets

    • Target

      201edd53b6970f4cd5349e70dede8a55_JaffaCakes118

    • Size

      994KB

    • MD5

      201edd53b6970f4cd5349e70dede8a55

    • SHA1

      05b9a7da60c577df586662601fbc51f79ec53890

    • SHA256

      76f7f817f2dc5037e33f9941efb136b96fec2ba19e6da21aeb7ca36f8be95389

    • SHA512

      3620ed96a26f25d0a2ccb4ad293654b6b7ad4b746397c4ef9bd7d91f770ecceda21ca653769eb9f441915360fc151e5ed27dabbe02552afb812b86becb2170ca

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxb:dJ5gEKNikf3hBfUiWxb

    Score
    10/10
    ammyyadminrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks