Overview

overview

10

Static

static

10

54a1556548...18.exe

windows7-x64

10

54a1556548...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54a1556548c5044b244a4a3b9f43f16f_JaffaCakes118

  • Size

    994KB

  • Sample

    240518-n94vtsag44

  • MD5

    54a1556548c5044b244a4a3b9f43f16f

  • SHA1

    5ac83e445f6c8004e7ab4d51f1f7ba3e4eab89fa

  • SHA256

    490d94ddc0d29c728d676c84ee626a05c2105dd18c2ddd7bbde6b4a30d010699

  • SHA512

    20998502d49cd199737ecffc63692091b59b98f06bcccc2170754da6c7043b8df0b9842b16f52877d712e0d27b5e072b8ae67033b3eba6adfef62b2f3f7252b8

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsx/:dJ5gEKNikf3hBfUiWx/

Score
10/10
ammyyadminrat

Malware Config

Targets

    • Target

      54a1556548c5044b244a4a3b9f43f16f_JaffaCakes118

    • Size

      994KB

    • MD5

      54a1556548c5044b244a4a3b9f43f16f

    • SHA1

      5ac83e445f6c8004e7ab4d51f1f7ba3e4eab89fa

    • SHA256

      490d94ddc0d29c728d676c84ee626a05c2105dd18c2ddd7bbde6b4a30d010699

    • SHA512

      20998502d49cd199737ecffc63692091b59b98f06bcccc2170754da6c7043b8df0b9842b16f52877d712e0d27b5e072b8ae67033b3eba6adfef62b2f3f7252b8

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsx/:dJ5gEKNikf3hBfUiWx/

    Score
    10/10
    ammyyadminrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks