General

  • Target

    b344c201a9640ebb274b8563652c0706_JaffaCakes118

  • Size

    1012KB

  • Sample

    240616-nkp1davgpq

  • MD5

    b344c201a9640ebb274b8563652c0706

  • SHA1

    5745ef173d9a116dc8123330f8cdc228b9415c6a

  • SHA256

    53aaff56d3ce4fb2f53347afa0213257e9d5c27ee3b8ed9eaa5d1f8303755b70

  • SHA512

    aa85e9238d4642d1759b38bec670afb1c096f5cf1ad2eabc30caa96bb295cbe924984c41baeb37c9146ecf23cfa997a6f8732144030a369816f983f1c29630ef

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxH:7J5gEKNikf3hBfUiWxH

Score
10/10

Malware Config

Targets

    • Target

      b344c201a9640ebb274b8563652c0706_JaffaCakes118

    • Size

      1012KB

    • MD5

      b344c201a9640ebb274b8563652c0706

    • SHA1

      5745ef173d9a116dc8123330f8cdc228b9415c6a

    • SHA256

      53aaff56d3ce4fb2f53347afa0213257e9d5c27ee3b8ed9eaa5d1f8303755b70

    • SHA512

      aa85e9238d4642d1759b38bec670afb1c096f5cf1ad2eabc30caa96bb295cbe924984c41baeb37c9146ecf23cfa997a6f8732144030a369816f983f1c29630ef

    • SSDEEP

      24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxH:7J5gEKNikf3hBfUiWxH

    Score
    10/10
    • Ammyy Admin

      Remote admin tool with various capabilities.

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks