Overview

overview

10

Static

static

10

3ddd87914b...18.exe

windows7-x64

10

3ddd87914b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ddd87914b03464dec7ce22534e9e779_JaffaCakes118

  • Size

    993KB

  • Sample

    240514-ezsv5saf2t

  • MD5

    3ddd87914b03464dec7ce22534e9e779

  • SHA1

    099d3432b497f56d34a41832e7c21a4b155f6e5b

  • SHA256

    abdfad0c57f3e708ebcc12b3c829baf4f8d8dc8a26a4e3753bc2e5b7a2a26d8c

  • SHA512

    00982884fff0fe650bfffe26fb98d74004acf709a0300622040f0ea2ab357f57584da8f2d31a7547b7062356ececd616902cb6dc600e02a005f17cd64589fca2

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxD:dJ5gEKNikf3hBfUiWxD

Score
10/10
ammyyadminrat

Malware Config

Targets

    • Target

      3ddd87914b03464dec7ce22534e9e779_JaffaCakes118

    • Size

      993KB

    • MD5

      3ddd87914b03464dec7ce22534e9e779

    • SHA1

      099d3432b497f56d34a41832e7c21a4b155f6e5b

    • SHA256

      abdfad0c57f3e708ebcc12b3c829baf4f8d8dc8a26a4e3753bc2e5b7a2a26d8c

    • SHA512

      00982884fff0fe650bfffe26fb98d74004acf709a0300622040f0ea2ab357f57584da8f2d31a7547b7062356ececd616902cb6dc600e02a005f17cd64589fca2

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxD:dJ5gEKNikf3hBfUiWxD

    Score
    10/10
    ammyyadminrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks