aa_v3.zip
- SHA256 0abfee8952acaf9510e25ca4d6f2cdfdc790f527bbfc06d72b63c188a161878b
Password
infected
Behavioral task
behavioral1
Sample
AA_v3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
AA_v3.exe
Resource
win10v2004-20230915-en
| resource | yara_rule |
|---|---|
| static1/unpack001/AA_v3.exe | family_ammyyadmin |
AmmyyAdmin payload
Sep 15, 2020
CN=Ammyy LLC,O=Ammyy LLC,POSTALCODE=117105,STREET=Varshavskoe Shosse\, 32,ST=Moscow,C=RU
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US