ammyyadmin | d8829f7135eba7a5c35870333582733a5a586d354a82490b69bf1e772118dc5e | Triage

Submit
Reports

Overview

overview

Static

static

d8829f7135...eN.exe

windows7-x64

d8829f7135...eN.exe

windows10-2004-x64

Sharing

General

Target

d8829f7135eba7a5c35870333582733a5a586d354a82490b69bf1e772118dc5eN
Size

1013KB
Sample

241009-pv7hvaygmd
MD5

d64b1982a74b76baff2ea716f543c250
SHA1

c7cb1c0b7686def8168f42af3cd7a9ce526a0372
SHA256

d8829f7135eba7a5c35870333582733a5a586d354a82490b69bf1e772118dc5e
SHA512

b504b363c952221317365f52a72875c2b4b3eba0d12e23e311595eb8917c359369da23a49511cab919a8f2363219e7dc69c100d496cb0f3323d2df4065fd4e54
SSDEEP

24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxc:7J5gEKNikf3hBfUiWxc

Score

10^/10

ammyyadmin discovery rat upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

d8829f7135eba7a5c35870333582733a5a586d354a82490b69bf1e772118dc5eN.exe

Resource

win7-20240903-en

ammyyadmin discovery rat upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

d8829f7135eba7a5c35870333582733a5a586d354a82490b69bf1e772118dc5eN.exe

Resource

win10v2004-20241007-en

ammyyadmin discovery rat upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  d8829f7135eba7a5c35870333582733a5a586d354a82490b69bf1e772118dc5eN
- Size
  
  1013KB
- MD5
  
  d64b1982a74b76baff2ea716f543c250
- SHA1
  
  c7cb1c0b7686def8168f42af3cd7a9ce526a0372
- SHA256
  
  d8829f7135eba7a5c35870333582733a5a586d354a82490b69bf1e772118dc5e
- SHA512
  
  b504b363c952221317365f52a72875c2b4b3eba0d12e23e311595eb8917c359369da23a49511cab919a8f2363219e7dc69c100d496cb0f3323d2df4065fd4e54
- SSDEEP
  
  24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxc:7J5gEKNikf3hBfUiWxc
Score

10^/10

ammyyadmin discovery rat upx
- Ammyy Admin
  Remote admin tool with various capabilities.
  rat ammyyadmin
- AmmyyAdmin payload
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ammyyadmindiscoveryratupx

behavioral2

ammyyadmindiscoveryratupx

© 2018-2025

Terms | Privacy