Overview

overview

10

Static

static

10

NEAS.0c4b1...00.exe

windows7-x64

10

NEAS.0c4b1...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0c4b1ed7cdd35f99ca402d4a8bfb3800.exe

  • Size

    974KB

  • Sample

    231020-tc9byaef62

  • MD5

    0c4b1ed7cdd35f99ca402d4a8bfb3800

  • SHA1

    7a306063d351d92482af1fcb87f8af31b68e173e

  • SHA256

    2626aec66894cf1c7694f4daf836207f2d830ba27df4995471ac8a860ba29e23

  • SHA512

    db6de254a79490b1c10f1954403509bcab7a4439b7a1675ee6fd9f8b8a63708f2beaaece5a9c19e9ab40d0a3ee76caba2d4eeddd6764065afe383cc6dde56a76

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxC:7J5gEKNikf3hBfUiWxC

Score
10/10
ammyyadminratupx

Malware Config

Targets

    • Target

      NEAS.0c4b1ed7cdd35f99ca402d4a8bfb3800.exe

    • Size

      974KB

    • MD5

      0c4b1ed7cdd35f99ca402d4a8bfb3800

    • SHA1

      7a306063d351d92482af1fcb87f8af31b68e173e

    • SHA256

      2626aec66894cf1c7694f4daf836207f2d830ba27df4995471ac8a860ba29e23

    • SHA512

      db6de254a79490b1c10f1954403509bcab7a4439b7a1675ee6fd9f8b8a63708f2beaaece5a9c19e9ab40d0a3ee76caba2d4eeddd6764065afe383cc6dde56a76

    • SSDEEP

      24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxC:7J5gEKNikf3hBfUiWxC

    Score
    10/10
    ammyyadminratupx

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks