Overview

overview

10

Static

static

10

df8741c1d8...6N.exe

windows7-x64

10

df8741c1d8...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df8741c1d82e9a2df69b9acf98d11638ae794e3329f3f58613b48494abd34386N

  • Size

    975KB

  • Sample

    240917-ep9e5stgqm

  • MD5

    7c8b77ce3749e212fa084231e4c319f0

  • SHA1

    8a80b6e1647c23c4b0ed04496c4196a65e43f497

  • SHA256

    df8741c1d82e9a2df69b9acf98d11638ae794e3329f3f58613b48494abd34386

  • SHA512

    35f23da2d26c1f5d0dd4d1ae17520b0d965f00259a268130ca7436fe38e1931039a7b75358018d3e9b7fde47417c54d8aa88ff1f867a09c0ce762f050b3f2333

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxV:7J5gEKNikf3hBfUiWxV

Score
10/10
ammyyadmindiscoveryratupx

Malware Config

Targets

    • Target

      df8741c1d82e9a2df69b9acf98d11638ae794e3329f3f58613b48494abd34386N

    • Size

      975KB

    • MD5

      7c8b77ce3749e212fa084231e4c319f0

    • SHA1

      8a80b6e1647c23c4b0ed04496c4196a65e43f497

    • SHA256

      df8741c1d82e9a2df69b9acf98d11638ae794e3329f3f58613b48494abd34386

    • SHA512

      35f23da2d26c1f5d0dd4d1ae17520b0d965f00259a268130ca7436fe38e1931039a7b75358018d3e9b7fde47417c54d8aa88ff1f867a09c0ce762f050b3f2333

    • SSDEEP

      24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxV:7J5gEKNikf3hBfUiWxV

    Score
    10/10
    ammyyadmindiscoveryratupx

    • Ammyy Admin

      Remote admin tool with various capabilities.

      ratammyyadmin

    • AmmyyAdmin payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks