Overview

overview

10

Static

static

10

b55e187517...cs.exe

windows7-x64

10

b55e187517...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b55e18751720370b951e4d7112578350_NeikiAnalytics

  • Size

    954KB

  • Sample

    240516-hlp4wahb33

  • MD5

    b55e18751720370b951e4d7112578350

  • SHA1

    5bd4a5233fcc8e5817b9dc22ae9c163d5b943acd

  • SHA256

    9cc3a59e4966b7af97d6de0a7bb50596f7fff08cd21236a752d632697c714982

  • SHA512

    26acf813a09b059740b4e8a8178bb7748f38592623e5c49cfab5e46f522411ffe35ca693159ca852b13473644d09c8332ef41d80249c3752bf4ee63dfe04cdd3

  • SSDEEP

    24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsx8:mJ5gEKNikf3hBfUiWx8

Score
10/10
ammyyadminratupx

Malware Config

Targets

    • Target

      b55e18751720370b951e4d7112578350_NeikiAnalytics

    • Size

      954KB

    • MD5

      b55e18751720370b951e4d7112578350

    • SHA1

      5bd4a5233fcc8e5817b9dc22ae9c163d5b943acd

    • SHA256

      9cc3a59e4966b7af97d6de0a7bb50596f7fff08cd21236a752d632697c714982

    • SHA512

      26acf813a09b059740b4e8a8178bb7748f38592623e5c49cfab5e46f522411ffe35ca693159ca852b13473644d09c8332ef41d80249c3752bf4ee63dfe04cdd3

    • SSDEEP

      24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsx8:mJ5gEKNikf3hBfUiWx8

    Score
    10/10
    ammyyadminratupx

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks