Overview

overview

10

Static

static

10

AA/AA.exe

windows7-x64

10

AA/AA.exe

windows10-2004-x64

10

AA/AA_v3.9.exe

windows7-x64

10

AA/AA_v3.9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8a5093d7690d7479ce18812a2135abc_JaffaCakes118

  • Size

    790KB

  • Sample

    240829-mhz7wswgpd

  • MD5

    c8a5093d7690d7479ce18812a2135abc

  • SHA1

    84d1de3061488e6d82359e04071d52b1597cdbd6

  • SHA256

    606a327219e54ed3e2b4bb751bce95f0af811f2cf7be007cbd4c12650b3df3c5

  • SHA512

    8834d75740f97b0e706d799a7b520357bdb07ba2f8bbaf9b80c91a0a0e9cc10cf84a75c0791aedd60b8aea600a9f4593d849ca7ffd13eadbc6ba1ecba5cc6d24

  • SSDEEP

    12288:JuPude6ApnglGhBBRlqytxdy72fYcVrsuPude6ApnglGhBBRlqytxdy72fYcVr5:Pe6GlvRld07qVrQe6GlvRld07qVr5

Score
10/10
ammyyadminflawedammyydiscoverytrojan

Malware Config

Targets

    • Target

      AA/AA.exe

    • Size

      772KB

    • MD5

      94bdeb3679552811166a849a5c01805b

    • SHA1

      28a4b0150221b77375a786a93bcd0a033567886d

    • SHA256

      ba877be92e535b9dce7f15f7bb5ac0a67e93c7ddd557949e6ec89a73741aca41

    • SHA512

      259ad3291f62456e37f3ffd57131a701672be21b3f9010f68e53714e1ea9dfa6190ec08af143f32d96e3cdc8c5018335ddbad3d13bc8655839817b304a7afc8d

    • SSDEEP

      12288:HSX+EvrCA3FNIs34Zk1L1ZSNlm3Spsal6lbRtMuStGKcsCSqcl90VahgAV:QFNN4Zk1LTclm3e1kbRtyGKcpHcl5iAV

    Score
    10/10
    flawedammyydiscoverytrojan

    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

      trojanflawedammyy
    behavioral1behavioral2

    • Target

      AA/AA_v3.9.exe

    • Size

      772KB

    • MD5

      94bdeb3679552811166a849a5c01805b

    • SHA1

      28a4b0150221b77375a786a93bcd0a033567886d

    • SHA256

      ba877be92e535b9dce7f15f7bb5ac0a67e93c7ddd557949e6ec89a73741aca41

    • SHA512

      259ad3291f62456e37f3ffd57131a701672be21b3f9010f68e53714e1ea9dfa6190ec08af143f32d96e3cdc8c5018335ddbad3d13bc8655839817b304a7afc8d

    • SSDEEP

      12288:HSX+EvrCA3FNIs34Zk1L1ZSNlm3Spsal6lbRtMuStGKcsCSqcl90VahgAV:QFNN4Zk1LTclm3e1kbRtyGKcpHcl5iAV

    Score
    10/10
    flawedammyydiscoverytrojan

    • FlawedAmmyy RAT

      Remote-access trojan based on leaked code for the Ammyy remote admin software.

      trojanflawedammyy
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks