ammyyadmin | adbf5ca172f577b69da6a050baaf964055d7537e5b120866aa3bb09962166323 | Triage

Submit
Reports

Overview

overview

Static

static

adbf5ca172...3N.exe

windows7-x64

adbf5ca172...3N.exe

windows10-2004-x64

Sharing

General

Target

adbf5ca172f577b69da6a050baaf964055d7537e5b120866aa3bb09962166323N
Size

995KB
Sample

241027-ap5pqs1cne
MD5

e783c1ee4bebec77143096e00f279550
SHA1

77e939a86461b36c047e83e5894c707ca32ebfff
SHA256

adbf5ca172f577b69da6a050baaf964055d7537e5b120866aa3bb09962166323
SHA512

1ba55855a86b011a887800507b8cd4090caac480505f78562d305241533fb1ec38e7e52a2c8ba6b3ecef0a9ac2a14165e82a2c1bbb580fa97a91b7f0368ebfe7
SSDEEP

24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxG:dJ5gEKNikf3hBfUiWxG

Score

10^/10

ammyyadmin discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

adbf5ca172f577b69da6a050baaf964055d7537e5b120866aa3bb09962166323N.exe

Resource

win7-20240903-en

ammyyadmin discovery rat

windows7-x64

8 signatures

120 seconds

Behavioral task

behavioral2

Sample

adbf5ca172f577b69da6a050baaf964055d7537e5b120866aa3bb09962166323N.exe

Resource

win10v2004-20241007-en

ammyyadmin discovery rat

windows10-2004-x64

8 signatures

120 seconds

Malware Config

Targets

- Target
  
  adbf5ca172f577b69da6a050baaf964055d7537e5b120866aa3bb09962166323N
- Size
  
  995KB
- MD5
  
  e783c1ee4bebec77143096e00f279550
- SHA1
  
  77e939a86461b36c047e83e5894c707ca32ebfff
- SHA256
  
  adbf5ca172f577b69da6a050baaf964055d7537e5b120866aa3bb09962166323
- SHA512
  
  1ba55855a86b011a887800507b8cd4090caac480505f78562d305241533fb1ec38e7e52a2c8ba6b3ecef0a9ac2a14165e82a2c1bbb580fa97a91b7f0368ebfe7
- SSDEEP
  
  24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxG:dJ5gEKNikf3hBfUiWxG
Score

10^/10

ammyyadmin discovery rat
- Ammyy Admin
  Remote admin tool with various capabilities.
  rat ammyyadmin
- AmmyyAdmin payload
- Ammyyadmin family
  ammyyadmin
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ammyyadmindiscoveryrat

behavioral2

ammyyadmindiscoveryrat

© 2018-2025

Terms | Privacy