Overview

overview

10

Static

static

10

5767921da6...2a.exe

windows7-x64

10

5767921da6...2a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5767921da620f5755d8ebb63c78fa3c2806003eede39253806813724e62f632a.exe.zip

  • Size

    382KB

  • Sample

    231201-sly2wsbh25

  • MD5

    5543e5ae9be6b7fb55deff7c14e9e5e9

  • SHA1

    8082084e3f18cd0291dbc77b2eed3357b5c791a5

  • SHA256

    e1b9d77cb265711831aca195fb1ca299b9e6b2df18b8c086c26876151f57e837

  • SHA512

    265aede5e74adcf6bdc2e5129f2d51d1178cb6c0507eba0d8830029561da1eef77f0dbf1abfd92f4e001adc7c5ed4b9ec2462b7a7118fa983f0712ad926e7b1b

  • SSDEEP

    6144:HYlBs4P8/HdGLF0X5qVx6tlUQXVdSiOWxdjkCW76+GFXwhISiTRx8x3bKMj8oB2i:HYnsxdGx0gVASmFxdjkCW7DY7SiTRyA0

Score
10/10
ammyyadminflawedammyytrojan

Malware Config

Targets

    • Target

      5767921da620f5755d8ebb63c78fa3c2806003eede39253806813724e62f632a.exe

    • Size

      709KB

    • MD5

      2104f66da494fb2cac8d654f02cd85d7

    • SHA1

      98e44b9c65c15384da664d1b548e408b486e47bc

    • SHA256

      5767921da620f5755d8ebb63c78fa3c2806003eede39253806813724e62f632a

    • SHA512

      24cebfda8f1b90bc542f19d3c0ae8e7b51771c4e7e5b2fd2560dec1866b74f1172d85a6dbbf809a5f5bb9ecbac6a25db3477e8eec2fdb2d5f55fe4470b1555dc

    • SSDEEP

      12288:J/VanOH+kAX8CrJpc4+9djmLfN971Rtc3MmylZDaehlJgJ:faOH+kbCr/c4+9hm7r1Rt4MmylZDV6J

    Score
    10/10
    flawedammyytrojan

    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

      trojanflawedammyy

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks