Overview

overview

10

Static

static

10

10c182e0e7...e0.exe

windows7-x64

10

10c182e0e7...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10c182e0e705aa72cdb4491752f8f2e0

  • Size

    547KB

  • Sample

    231224-y7gmmahhen

  • MD5

    10c182e0e705aa72cdb4491752f8f2e0

  • SHA1

    2412206ea3c6084a6764ee42b756f6f6a8c745d1

  • SHA256

    e6f19ef7ad9485dbb3bcc7f5cdca8b6dd388837c72f1c0f64730fe6e85b5537b

  • SHA512

    6b8c80c674a970dabd6b86d5a9cccf6f4c8bfe4ce28b64a3008b12ebfc16fb8b28cef9c24b352396098b751e0e7913723aa176454f9b33a69f67ffb87f731918

  • SSDEEP

    12288:gVnvmlaX9OOr3SCQ0F+bJ8SDmH/P3veRt9ahLXhj5RAT8:gVngK3HQzJtDmXfeRtQhLxj5R/

Score
10/10
ammyyadminflawedammyytrojan

Malware Config

Targets

    • Target

      10c182e0e705aa72cdb4491752f8f2e0

    • Size

      547KB

    • MD5

      10c182e0e705aa72cdb4491752f8f2e0

    • SHA1

      2412206ea3c6084a6764ee42b756f6f6a8c745d1

    • SHA256

      e6f19ef7ad9485dbb3bcc7f5cdca8b6dd388837c72f1c0f64730fe6e85b5537b

    • SHA512

      6b8c80c674a970dabd6b86d5a9cccf6f4c8bfe4ce28b64a3008b12ebfc16fb8b28cef9c24b352396098b751e0e7913723aa176454f9b33a69f67ffb87f731918

    • SSDEEP

      12288:gVnvmlaX9OOr3SCQ0F+bJ8SDmH/P3veRt9ahLXhj5RAT8:gVngK3HQzJtDmXfeRtQhLxj5R/

    Score
    10/10
    flawedammyytrojan

    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

      trojanflawedammyy

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks