Overview

overview

10

Static

static

10

b77f695ff4...9c.exe

windows7_x64

b77f695ff4...9c.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b77f695ff45d0ae0eeafef3dd41ae7c89bc56036a3ef0f4168509bae54c8db9c

  • Size

    942KB

  • Sample

    210907-gwjt6scaa4

  • MD5

    33889f086935081da3fd8331871d4984

  • SHA1

    31648aa325742695ce8e9c23115235f2d2816248

  • SHA256

    b77f695ff45d0ae0eeafef3dd41ae7c89bc56036a3ef0f4168509bae54c8db9c

  • SHA512

    7fb2b6aec4a9134e88a1adc4247f3dab2841a70637cda87a8f2e2470b61a105d361bc749fc93178bc60627860b1f618eef9817ce3e1c03895bdd96e6e6a381ce

Score
10/10
ammyyadminrat

Malware Config

Targets

    • Target

      b77f695ff45d0ae0eeafef3dd41ae7c89bc56036a3ef0f4168509bae54c8db9c

    • Size

      942KB

    • MD5

      33889f086935081da3fd8331871d4984

    • SHA1

      31648aa325742695ce8e9c23115235f2d2816248

    • SHA256

      b77f695ff45d0ae0eeafef3dd41ae7c89bc56036a3ef0f4168509bae54c8db9c

    • SHA512

      7fb2b6aec4a9134e88a1adc4247f3dab2841a70637cda87a8f2e2470b61a105d361bc749fc93178bc60627860b1f618eef9817ce3e1c03895bdd96e6e6a381ce

    Score
    10/10
    ammyyadminrat

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin Payload

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks