General
-
Target
9b3f4d6a9bae4d7f9cfe45e706db8fe4baef51ae12353941e8b1532b231e6eac.exe.zip
-
Size
402KB
-
Sample
231231-bww7lsgbh4
-
MD5
f6e43965c8fcd3acb537ade5e22040ee
-
SHA1
848fe5cfd10e0065d1f0e07edfe4987c439967ed
-
SHA256
9ab58a59ab22451dde1fc07a72f0761b674b4da9b2ab65e574163650f987ee4b
-
SHA512
1810513654526c4beed0a5851daf6c70876a37e897319e3d8da888b50af7fa615eeba4e2ceb682b939230edb2d39c598fee9198bcb96d69e93ceea25c4ca1d88
-
SSDEEP
12288:vj7MWROYkSGbGx6LIBuRPnMjxWgz4mTMrvg:v3MSkScGx6tDgztSg
Behavioral task
behavioral1
Sample
9b3f4d6a9bae4d7f9cfe45e706db8fe4baef51ae12353941e8b1532b231e6eac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b3f4d6a9bae4d7f9cfe45e706db8fe4baef51ae12353941e8b1532b231e6eac.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
9b3f4d6a9bae4d7f9cfe45e706db8fe4baef51ae12353941e8b1532b231e6eac.exe
-
Size
746KB
-
MD5
2cbf5657ffd8858a9597f296a60270c2
-
SHA1
b130611c92788337c4f6bb9e9454ff06eb409166
-
SHA256
9b3f4d6a9bae4d7f9cfe45e706db8fe4baef51ae12353941e8b1532b231e6eac
-
SHA512
06339a299c8c9ce55e9b96582e54e0bf9e04f894ceb47c07486adf8b0140c2a01fd0932207aca8112ee0b16ba8711fee9435e37339aafb94f167b5a736ee7d0b
-
SSDEEP
12288:6NgEvTkYGzXUMA7PTgM0YOg26y4RtcxcUwhqb3omaY80NP6gL:6XTszE7PTgM0YOgA4RtcbwhsSYFVL
Score10/10-
FlawedAmmyy RAT
Remote-access trojan based on leaked code for the Ammyy remote admin software.
-
Drops file in System32 directory
-