Overview

overview

10

Static

static

10

e5d57ca399...18.exe

windows7-x64

10

e5d57ca399...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5d57ca399df83288e2a5b247f924793_JaffaCakes118

  • Size

    994KB

  • Sample

    240917-aq769axfqp

  • MD5

    e5d57ca399df83288e2a5b247f924793

  • SHA1

    927c3fb15898d75cc65bfc600cd45d8307fdc081

  • SHA256

    7c554e120dcd105f925292809d060df5e8f175eec741fba510f12fdec5a90048

  • SHA512

    c5503281f3cd2371c4fbb862599004a3e42e023aeeef2a260cf5baaddfe06a541c4e5b0905f944b77b6866f48637c1b49f6cf1ad4507aabe88eaba366f6cf9f2

  • SSDEEP

    24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxE:dJ5gEKNikf3hBfUiWxE

Score
10/10
ammyyadmindiscoveryrat

Malware Config

Targets

    • Target

      e5d57ca399df83288e2a5b247f924793_JaffaCakes118

    • Size

      994KB

    • MD5

      e5d57ca399df83288e2a5b247f924793

    • SHA1

      927c3fb15898d75cc65bfc600cd45d8307fdc081

    • SHA256

      7c554e120dcd105f925292809d060df5e8f175eec741fba510f12fdec5a90048

    • SHA512

      c5503281f3cd2371c4fbb862599004a3e42e023aeeef2a260cf5baaddfe06a541c4e5b0905f944b77b6866f48637c1b49f6cf1ad4507aabe88eaba366f6cf9f2

    • SSDEEP

      24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxE:dJ5gEKNikf3hBfUiWxE

    Score
    10/10
    ammyyadmindiscoveryrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks