Overview

overview

10

Static

static

10

b76fc4e16b...18.exe

windows7-x64

10

b76fc4e16b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b76fc4e16b94851d924c545879908884_JaffaCakes118

  • Size

    994KB

  • Sample

    240617-jg31ls1amb

  • MD5

    b76fc4e16b94851d924c545879908884

  • SHA1

    027cb41944ff7c79356f771d6be597561d490299

  • SHA256

    b57d1c18a44424fbbd72c3900fe76399bc3bc043c9047679c564b849ccf9d178

  • SHA512

    fca42de8b2a5ac4cbaabce8810eeff68a61abf902b9fe446c0d386d0d2da82d93ac943a92c3898c5a66fbb92f8566236e03bfbd38274c550186c0767fc4aaef2

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxF:dJ5gEKNikf3hBfUiWxF

Score
10/10
ammyyadminrat

Malware Config

Targets

    • Target

      b76fc4e16b94851d924c545879908884_JaffaCakes118

    • Size

      994KB

    • MD5

      b76fc4e16b94851d924c545879908884

    • SHA1

      027cb41944ff7c79356f771d6be597561d490299

    • SHA256

      b57d1c18a44424fbbd72c3900fe76399bc3bc043c9047679c564b849ccf9d178

    • SHA512

      fca42de8b2a5ac4cbaabce8810eeff68a61abf902b9fe446c0d386d0d2da82d93ac943a92c3898c5a66fbb92f8566236e03bfbd38274c550186c0767fc4aaef2

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxF:dJ5gEKNikf3hBfUiWxF

    Score
    10/10
    ammyyadminrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks