Overview

overview

10

Static

static

10

d051ad0f21...18.exe

windows7-x64

10

d051ad0f21...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d051ad0f2199d72ce06d070c1e691ac9_JaffaCakes118

  • Size

    994KB

  • Sample

    240906-ydal8avdjh

  • MD5

    d051ad0f2199d72ce06d070c1e691ac9

  • SHA1

    db444277219af220ac05101a5ceb517b4bee069d

  • SHA256

    8e23de60b1be4d73d9e9507bed4aaa96f5d5a1ad4b8269160430580d8dea8730

  • SHA512

    4ab8b824d8df2772f8fdd9f05264660e2600ef5253781197ff97312fe7908af5c60d7c4377dd05adb71653af26d5a33bfdc24f2cd1894b2ddd3f8f8aba60fffc

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxS:dJ5gEKNikf3hBfUiWxS

Score
10/10
ammyyadmindiscoveryrat

Malware Config

Targets

    • Target

      d051ad0f2199d72ce06d070c1e691ac9_JaffaCakes118

    • Size

      994KB

    • MD5

      d051ad0f2199d72ce06d070c1e691ac9

    • SHA1

      db444277219af220ac05101a5ceb517b4bee069d

    • SHA256

      8e23de60b1be4d73d9e9507bed4aaa96f5d5a1ad4b8269160430580d8dea8730

    • SHA512

      4ab8b824d8df2772f8fdd9f05264660e2600ef5253781197ff97312fe7908af5c60d7c4377dd05adb71653af26d5a33bfdc24f2cd1894b2ddd3f8f8aba60fffc

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxS:dJ5gEKNikf3hBfUiWxS

    Score
    10/10
    ammyyadmindiscoveryrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks