Overview

overview

10

Static

static

10

744b8b6be5...1c.exe

windows7-x64

10

744b8b6be5...1c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    744b8b6be56fd19f91c2855251f7e03f04842fad14d1070cad9cd3aa3e14561c

  • Size

    995KB

  • Sample

    240812-1qccpasapl

  • MD5

    9a29b9313c28c155be35fdef41858034

  • SHA1

    28598ff9830ebc4fb51aa68d997deef1aa879038

  • SHA256

    744b8b6be56fd19f91c2855251f7e03f04842fad14d1070cad9cd3aa3e14561c

  • SHA512

    bd6fa2a6300cd287ac33676f66cd0dc668d4406a2d35b2ddbe87458f3edf18bdfd560cabe073a3203f4832d290aebee874aa9d5fb7caf19936fe1142d802dab7

  • SSDEEP

    24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxv:mJ5gEKNikf3hBfUiWxv

Score
10/10
ammyyadmindiscoveryratupx

Malware Config

Targets

    • Target

      744b8b6be56fd19f91c2855251f7e03f04842fad14d1070cad9cd3aa3e14561c

    • Size

      995KB

    • MD5

      9a29b9313c28c155be35fdef41858034

    • SHA1

      28598ff9830ebc4fb51aa68d997deef1aa879038

    • SHA256

      744b8b6be56fd19f91c2855251f7e03f04842fad14d1070cad9cd3aa3e14561c

    • SHA512

      bd6fa2a6300cd287ac33676f66cd0dc668d4406a2d35b2ddbe87458f3edf18bdfd560cabe073a3203f4832d290aebee874aa9d5fb7caf19936fe1142d802dab7

    • SSDEEP

      24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxv:mJ5gEKNikf3hBfUiWxv

    Score
    10/10
    ammyyadmindiscoveryratupx

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks