Overview

overview

10

Static

static

10

a149f27217...18.exe

windows7-x64

10

a149f27217...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a149f27217432d2a63dfa2d6d293a308_JaffaCakes118

  • Size

    1012KB

  • Sample

    240612-tqj9za1ekd

  • MD5

    a149f27217432d2a63dfa2d6d293a308

  • SHA1

    0ef90d761cec39515c5b56a286576a4b5d212661

  • SHA256

    9d578cc34fb1b3ac70db2bf01e2e7a5cc72b5b3eefd0850a12d6d5b4b0b7934e

  • SHA512

    183268f0051e5132ef0769169f2ba3655a99624cf2d9b90df7a14bbc1f5e04897a1038787ab53cf2f1230f1f04a025b20920777f1dee9fb9a685febde8a24224

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxu:7J5gEKNikf3hBfUiWxu

Score
10/10
ammyyadminratupx

Malware Config

Targets

    • Target

      a149f27217432d2a63dfa2d6d293a308_JaffaCakes118

    • Size

      1012KB

    • MD5

      a149f27217432d2a63dfa2d6d293a308

    • SHA1

      0ef90d761cec39515c5b56a286576a4b5d212661

    • SHA256

      9d578cc34fb1b3ac70db2bf01e2e7a5cc72b5b3eefd0850a12d6d5b4b0b7934e

    • SHA512

      183268f0051e5132ef0769169f2ba3655a99624cf2d9b90df7a14bbc1f5e04897a1038787ab53cf2f1230f1f04a025b20920777f1dee9fb9a685febde8a24224

    • SSDEEP

      24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxu:7J5gEKNikf3hBfUiWxu

    Score
    10/10
    ammyyadminratupx

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks