Overview

overview

10

Static

static

10

de3a402d51...18.exe

windows7-x64

10

de3a402d51...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de3a402d51ff1dbcf90aa356215e9122_JaffaCakes118

  • Size

    994KB

  • Sample

    240913-m17dxsygme

  • MD5

    de3a402d51ff1dbcf90aa356215e9122

  • SHA1

    a17f4b14fbda42a4ab47f49efb679eaff0b7cb8c

  • SHA256

    4d8c94472f7b8891fd45a5176a8b0c76dc3f1cc9935a12d96142f0edfaded422

  • SHA512

    327828e4e45bf8dc0d95a6e77e9025727d22d411adfd982deb856339e4f4d2b2395e0cae6537eb7a07c327912be136080b13d9704d073dad5e1b02f081b8bf9c

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxV:dJ5gEKNikf3hBfUiWxV

Score
10/10
ammyyadmindiscoveryrat

Malware Config

Targets

    • Target

      de3a402d51ff1dbcf90aa356215e9122_JaffaCakes118

    • Size

      994KB

    • MD5

      de3a402d51ff1dbcf90aa356215e9122

    • SHA1

      a17f4b14fbda42a4ab47f49efb679eaff0b7cb8c

    • SHA256

      4d8c94472f7b8891fd45a5176a8b0c76dc3f1cc9935a12d96142f0edfaded422

    • SHA512

      327828e4e45bf8dc0d95a6e77e9025727d22d411adfd982deb856339e4f4d2b2395e0cae6537eb7a07c327912be136080b13d9704d073dad5e1b02f081b8bf9c

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxV:dJ5gEKNikf3hBfUiWxV

    Score
    10/10
    ammyyadmindiscoveryrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks