General

  • Target

    5fc600351bade74c2791fc526bca6bb606355cc65e5253f7f791254db58ee7fa.exe.zip

  • Size

    419KB

  • Sample

    231201-sgc9maba96

  • MD5

    d0cffcd039de7bc430315775d03187ee

  • SHA1

    e045f5f338c1a0d28c27a4374a4598289e2099e4

  • SHA256

    3ad9cb45f39f133051423e6af7db02629c70b5652449c5027cdd116a29690eb1

  • SHA512

    7de946b481ec614f55d344ff9fe6fdbba74669ed5b205b67a0a01e1c58457ee5b407de2375f61c79d5aab897f6be13ed86412406a4546b3b046655208ffaea9e

  • SSDEEP

    6144:lZi2xjtq11ju3l80jgHKDOpsgH4XnU1HfkhLl54mMdRaSjGvhnUWczqZsIE:lA2xA7qfQKGsu4XiALlWmII+InUW3o

Malware Config

Targets

    • Target

      5fc600351bade74c2791fc526bca6bb606355cc65e5253f7f791254db58ee7fa.exe

    • Size

      778KB

    • MD5

      121e1634bf18768802427f0a13f039a9

    • SHA1

      8868654ba10fb4c9a7bd882d1f947f4fd51e988e

    • SHA256

      5fc600351bade74c2791fc526bca6bb606355cc65e5253f7f791254db58ee7fa

    • SHA512

      393df326af3109fe701b579b73f42f7a9b155bb4df6ea7049ad3ae9fdd03446576b887a99eb7a0d59949a7a63367e223253448b6f1a0ebeaf358fa2873dcc200

    • SSDEEP

      12288:hSX+EvrCA3FNIs34Zk1L1ZSNlm3Spsal6lbRtMuStGKcsCSqcl90Va1ugp:2FNN4Zk1LTclm3e1kbRtyGKcpHcl517p

    Score
    10/10
    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

MITRE ATT&CK Matrix

Tasks