Overview

overview

10

Static

static

10

d50726f8e2...18.exe

windows7-x64

10

d50726f8e2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d50726f8e2d82631d109d590761be2ba_JaffaCakes118

  • Size

    994KB

  • Sample

    240908-yrdwssshnl

  • MD5

    d50726f8e2d82631d109d590761be2ba

  • SHA1

    1f01c6caf6be69547f08849842c53578b6331540

  • SHA256

    98ede4d6ec77319d6523769e18eaac98f47b01e972f6a5f20bc5cf81a5c37678

  • SHA512

    4ec434063a1e5b440c685a19e7aa9acb987baaa19dde16ee01c5c650d03461a9d3a98dd609ea4eb5aa42c810db9655b8dce37ce980574d6a12cf8bb721c0c7ca

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxe:dJ5gEKNikf3hBfUiWxe

Score
10/10
ammyyadmindiscoveryrat

Malware Config

Targets

    • Target

      d50726f8e2d82631d109d590761be2ba_JaffaCakes118

    • Size

      994KB

    • MD5

      d50726f8e2d82631d109d590761be2ba

    • SHA1

      1f01c6caf6be69547f08849842c53578b6331540

    • SHA256

      98ede4d6ec77319d6523769e18eaac98f47b01e972f6a5f20bc5cf81a5c37678

    • SHA512

      4ec434063a1e5b440c685a19e7aa9acb987baaa19dde16ee01c5c650d03461a9d3a98dd609ea4eb5aa42c810db9655b8dce37ce980574d6a12cf8bb721c0c7ca

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxe:dJ5gEKNikf3hBfUiWxe

    Score
    10/10
    ammyyadmindiscoveryrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks