Overview

overview

10

Static

static

10

ce2c5af625...18.exe

windows7-x64

10

ce2c5af625...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce2c5af625880ba1e46230cd24552e2c_JaffaCakes118

  • Size

    993KB

  • Sample

    240905-3rlzmavfre

  • MD5

    ce2c5af625880ba1e46230cd24552e2c

  • SHA1

    0457bd511bf883403f2782b4f2c1cbee6420882b

  • SHA256

    02efc3438c29ee833a6f3ae23ec3cd80bd80d417643520b5cc3830d2b851b06c

  • SHA512

    64829eef43ea438df6efb2c10f946fb24acfa5e34863fcdbe68bd984e5e77baa14aca3087a47fbb9c6887065efce6b44c0097a5794de44cbefb81ed796eb9c64

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxd:dJ5gEKNikf3hBfUiWxd

Score
10/10
ammyyadmindiscoveryrat

Malware Config

Targets

    • Target

      ce2c5af625880ba1e46230cd24552e2c_JaffaCakes118

    • Size

      993KB

    • MD5

      ce2c5af625880ba1e46230cd24552e2c

    • SHA1

      0457bd511bf883403f2782b4f2c1cbee6420882b

    • SHA256

      02efc3438c29ee833a6f3ae23ec3cd80bd80d417643520b5cc3830d2b851b06c

    • SHA512

      64829eef43ea438df6efb2c10f946fb24acfa5e34863fcdbe68bd984e5e77baa14aca3087a47fbb9c6887065efce6b44c0097a5794de44cbefb81ed796eb9c64

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxd:dJ5gEKNikf3hBfUiWxd

    Score
    10/10
    ammyyadmindiscoveryrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks