ammyyadmin | 93b50ca44007e8e7c67b3f017302a72a47dd2fb77162e59486e29a72d4523c8a | Triage

Submit
Reports

Overview

overview

Static

static

93b50ca440...aN.exe

windows7-x64

93b50ca440...aN.exe

windows10-2004-x64

Sharing

General

Target

93b50ca44007e8e7c67b3f017302a72a47dd2fb77162e59486e29a72d4523c8aN
Size

994KB
Sample

241017-fn4nyatarh
MD5

2d8430fa683b34a453e9b07affb6e380
SHA1

ccfcb5fd1fe0bc7d24298f51f83fa8a360609eba
SHA256

93b50ca44007e8e7c67b3f017302a72a47dd2fb77162e59486e29a72d4523c8a
SHA512

710c96bd76e14199e4628e3f5bd759873c30d106914567c3bf6f23812168cf0ec140cfd50e23aade9d3d0e6790a3b2f3f85e7de4175fac0c504bde9c827dd8ab
SSDEEP

24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxx:dJ5gEKNikf3hBfUiWxx

Score

10^/10

ammyyadmin discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

93b50ca44007e8e7c67b3f017302a72a47dd2fb77162e59486e29a72d4523c8aN.exe

Resource

win7-20240708-en

ammyyadmin discovery rat

windows7-x64

7 signatures

120 seconds

Behavioral task

behavioral2

Sample

93b50ca44007e8e7c67b3f017302a72a47dd2fb77162e59486e29a72d4523c8aN.exe

Resource

win10v2004-20241007-en

ammyyadmin discovery rat

windows10-2004-x64

7 signatures

120 seconds

Malware Config

Targets

- Target
  
  93b50ca44007e8e7c67b3f017302a72a47dd2fb77162e59486e29a72d4523c8aN
- Size
  
  994KB
- MD5
  
  2d8430fa683b34a453e9b07affb6e380
- SHA1
  
  ccfcb5fd1fe0bc7d24298f51f83fa8a360609eba
- SHA256
  
  93b50ca44007e8e7c67b3f017302a72a47dd2fb77162e59486e29a72d4523c8a
- SHA512
  
  710c96bd76e14199e4628e3f5bd759873c30d106914567c3bf6f23812168cf0ec140cfd50e23aade9d3d0e6790a3b2f3f85e7de4175fac0c504bde9c827dd8ab
- SSDEEP
  
  24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxx:dJ5gEKNikf3hBfUiWxx
Score

10^/10

ammyyadmin discovery rat
- Ammyy Admin
  Remote admin tool with various capabilities.
  rat ammyyadmin
- AmmyyAdmin payload
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ammyyadmindiscoveryrat

behavioral2

ammyyadmindiscoveryrat

© 2018-2025

Terms | Privacy