Overview

overview

10

Static

static

10

AA_v3.9.exe

windows7-x64

10

AA_v3.9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21aa72dc30905087777604a24f354ac9_JaffaCakes118

  • Size

    404KB

  • Sample

    240507-zlpxjshh47

  • MD5

    21aa72dc30905087777604a24f354ac9

  • SHA1

    3c9e9ae70635b40e5522238d53327b58eba39c57

  • SHA256

    3e0b53534729ee35813949be6a62ae4b1a7faf99bda554ab9c9011b8e748e425

  • SHA512

    5bc10899713f6c3863a5be2707d34a1dc956a2639194c63ccefbf61e0fdac44028f346b516108ca84c25da302957de4279312024ed1e00c6ed55f1d9d34505a2

  • SSDEEP

    6144:BeKP0hrO7Ii8hOe/j6MfKZ8RtHaDDifsuodvtrOuLs9pzEAYjg7CyPNpxtYkgZWN:BeHi8gmTrf4FrJSzEvjCPNpxmkgLEsIF

Score
10/10
ammyyadminflawedammyytrojan

Malware Config

Targets

    • Target

      AA_v3.9.exe

    • Size

      778KB

    • MD5

      121e1634bf18768802427f0a13f039a9

    • SHA1

      8868654ba10fb4c9a7bd882d1f947f4fd51e988e

    • SHA256

      5fc600351bade74c2791fc526bca6bb606355cc65e5253f7f791254db58ee7fa

    • SHA512

      393df326af3109fe701b579b73f42f7a9b155bb4df6ea7049ad3ae9fdd03446576b887a99eb7a0d59949a7a63367e223253448b6f1a0ebeaf358fa2873dcc200

    • SSDEEP

      12288:hSX+EvrCA3FNIs34Zk1L1ZSNlm3Spsal6lbRtMuStGKcsCSqcl90Va1ugp:2FNN4Zk1LTclm3e1kbRtyGKcpHcl517p

    Score
    10/10
    flawedammyytrojan

    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

      trojanflawedammyy
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks