Overview

overview

10

Static

static

10

5e7c774dfe...18.exe

windows7-x64

10

5e7c774dfe...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e7c774dfe97161cb2f235773a52b256_JaffaCakes118

  • Size

    956KB

  • Sample

    240729-zctjdatdnc

  • MD5

    5e7c774dfe97161cb2f235773a52b256

  • SHA1

    c273307b1846e84eebc4e6fc29434c3a2af04b3c

  • SHA256

    f167c098debc24dc5484f0ad474262e1644d94793fdc849620b6d10ccb2c9f63

  • SHA512

    5d3f5ee60cfe4e7990e798d60cab6bf47bac85edba36ed5fdfde58a314418cdbd7cffdd1a3ed28b8cb007838dcb4b9b4a17759341d58297a5bb089b6b3fc6b8c

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxk:dJ5gEKNikf3hBfUiWxk

Score
10/10
ammyyadmindiscoveryrat

Malware Config

Targets

    • Target

      5e7c774dfe97161cb2f235773a52b256_JaffaCakes118

    • Size

      956KB

    • MD5

      5e7c774dfe97161cb2f235773a52b256

    • SHA1

      c273307b1846e84eebc4e6fc29434c3a2af04b3c

    • SHA256

      f167c098debc24dc5484f0ad474262e1644d94793fdc849620b6d10ccb2c9f63

    • SHA512

      5d3f5ee60cfe4e7990e798d60cab6bf47bac85edba36ed5fdfde58a314418cdbd7cffdd1a3ed28b8cb007838dcb4b9b4a17759341d58297a5bb089b6b3fc6b8c

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxk:dJ5gEKNikf3hBfUiWxk

    Score
    10/10
    ammyyadmindiscoveryrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks