Overview

overview

10

Static

static

10

bd186b034e...18.exe

windows7-x64

10

bd186b034e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd186b034ed7cb5a1ebd0c32f1ad054a_JaffaCakes118

  • Size

    1012KB

  • Sample

    240618-vxqwrssfpf

  • MD5

    bd186b034ed7cb5a1ebd0c32f1ad054a

  • SHA1

    c38ea029b9f3fc9eb9b6bc519154a7fa5a39ee17

  • SHA256

    9f23739389edb1a3724fe1754b44ade49dc54f037804b994a46ada39114b3f37

  • SHA512

    3514a2595010543149100a62341fcc7807beafa571c4710a5a118db65fd04e01439e2ab1eb882ad5024251cee74ac58cf0ae0d9a9a5da0ebb7ac58ac7ac73519

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxk:7J5gEKNikf3hBfUiWxk

Score
10/10
ammyyadminratupx

Malware Config

Targets

    • Target

      bd186b034ed7cb5a1ebd0c32f1ad054a_JaffaCakes118

    • Size

      1012KB

    • MD5

      bd186b034ed7cb5a1ebd0c32f1ad054a

    • SHA1

      c38ea029b9f3fc9eb9b6bc519154a7fa5a39ee17

    • SHA256

      9f23739389edb1a3724fe1754b44ade49dc54f037804b994a46ada39114b3f37

    • SHA512

      3514a2595010543149100a62341fcc7807beafa571c4710a5a118db65fd04e01439e2ab1eb882ad5024251cee74ac58cf0ae0d9a9a5da0ebb7ac58ac7ac73519

    • SSDEEP

      24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxk:7J5gEKNikf3hBfUiWxk

    Score
    10/10
    ammyyadminratupx

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks