Overview

overview

10

Static

static

10

924314d642...54.exe

windows7-x64

10

924314d642...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    924314d642591e2c6fcfee28a0d69ec1621643c13a5ab1c5cbef973b8b57fb54.exe.zip

  • Size

    382KB

  • Sample

    231231-b7739aghbn

  • MD5

    32bbd8bd7fbb406027838c7fdf7f5c66

  • SHA1

    a997c97f06f536cc87632b0317843360910e9ff5

  • SHA256

    d37a1406fe50b4b4a832ddeb77d631d613b127c24535afd876b836f6ed4bd464

  • SHA512

    927a7f9ca9b981b2957b1edeb69c116a37fece78c322d62d7d7acc488b7262eb68ef56da107197c3c8bf4f7587f679f69fa59eb624125f76ca965577f975c02b

  • SSDEEP

    6144:f2G1Yo6UfnuoDMNDP09hOCA+73vinA1QKGRrkDJ9BLHWV+P47RxGwZ0G0ytpDjd:898ux4OCh3xXIkDvUQQ7ydcpF

Score
10/10
ammyyadminflawedammyytrojan

Malware Config

Targets

    • Target

      924314d642591e2c6fcfee28a0d69ec1621643c13a5ab1c5cbef973b8b57fb54.exe

    • Size

      713KB

    • MD5

      c59be0a84718d97a82cfa59860bdab3a

    • SHA1

      2a0df9bf173e167f90331d4ba4b05720ba6d37e4

    • SHA256

      924314d642591e2c6fcfee28a0d69ec1621643c13a5ab1c5cbef973b8b57fb54

    • SHA512

      245e9b6d513ca17ba8561e40b3c3a5cccc5b2256358fbf30383a72050f0c817d2272284a92a8b22f75908f86474f6367beb16ebc143c9b96ad64d7e5bff3862b

    • SSDEEP

      12288:dVr29UGEg6VUM5oAL1jq3E2jj0NOjAqHKtCessZWjya7VM1en9Nm1RtNeCVao2Vp:vUbj4qwCessA41Rt0CVMVZtxP

    Score
    10/10
    flawedammyytrojan

    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

      trojanflawedammyy

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks