Overview

overview

10

Static

static

10

AA_v3.exe

windows7-x64

10

AA_v3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AA_v3.exe

  • Size

    778KB

  • Sample

    230724-g43x1sbb6t

  • MD5

    121e1634bf18768802427f0a13f039a9

  • SHA1

    8868654ba10fb4c9a7bd882d1f947f4fd51e988e

  • SHA256

    5fc600351bade74c2791fc526bca6bb606355cc65e5253f7f791254db58ee7fa

  • SHA512

    393df326af3109fe701b579b73f42f7a9b155bb4df6ea7049ad3ae9fdd03446576b887a99eb7a0d59949a7a63367e223253448b6f1a0ebeaf358fa2873dcc200

  • SSDEEP

    12288:hSX+EvrCA3FNIs34Zk1L1ZSNlm3Spsal6lbRtMuStGKcsCSqcl90Va1ugp:2FNN4Zk1LTclm3e1kbRtyGKcpHcl517p

Score
10/10
ammyyadminflawedammyytrojan

Malware Config

Targets

    • Target

      AA_v3.exe

    • Size

      778KB

    • MD5

      121e1634bf18768802427f0a13f039a9

    • SHA1

      8868654ba10fb4c9a7bd882d1f947f4fd51e988e

    • SHA256

      5fc600351bade74c2791fc526bca6bb606355cc65e5253f7f791254db58ee7fa

    • SHA512

      393df326af3109fe701b579b73f42f7a9b155bb4df6ea7049ad3ae9fdd03446576b887a99eb7a0d59949a7a63367e223253448b6f1a0ebeaf358fa2873dcc200

    • SSDEEP

      12288:hSX+EvrCA3FNIs34Zk1L1ZSNlm3Spsal6lbRtMuStGKcsCSqcl90Va1ugp:2FNN4Zk1LTclm3e1kbRtyGKcpHcl517p

    Score
    10/10
    flawedammyytrojan

    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

      trojanflawedammyy
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks