Overview

overview

10

Static

static

10

0455dd945b...eb.exe

windows7-x64

10

0455dd945b...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0455dd945bc7609133633b454cbe8fcfba92e8151a695c9feb69fd79d0e471eb

  • Size

    956KB

  • Sample

    240831-xrwk6szfrn

  • MD5

    d49b31cd91256550188c0ca87687c5df

  • SHA1

    b078501295db44a056332cd76796b4302161265a

  • SHA256

    0455dd945bc7609133633b454cbe8fcfba92e8151a695c9feb69fd79d0e471eb

  • SHA512

    65b134e9101b7131fd57347f3a612da1f3623e9b167e24f9843c7e8157b3a02fbab6ab7b0e1f947cbf04eaf20db1910957a6b3f9f905b3efba376f77224e4d39

  • SSDEEP

    24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxn:mJ5gEKNikf3hBfUiWxn

Score
10/10
ammyyadmindiscoveryratupx

Malware Config

Targets

    • Target

      0455dd945bc7609133633b454cbe8fcfba92e8151a695c9feb69fd79d0e471eb

    • Size

      956KB

    • MD5

      d49b31cd91256550188c0ca87687c5df

    • SHA1

      b078501295db44a056332cd76796b4302161265a

    • SHA256

      0455dd945bc7609133633b454cbe8fcfba92e8151a695c9feb69fd79d0e471eb

    • SHA512

      65b134e9101b7131fd57347f3a612da1f3623e9b167e24f9843c7e8157b3a02fbab6ab7b0e1f947cbf04eaf20db1910957a6b3f9f905b3efba376f77224e4d39

    • SSDEEP

      24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxn:mJ5gEKNikf3hBfUiWxn

    Score
    10/10
    ammyyadmindiscoveryratupx

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks