ammyyadmin | 03072c0a735a363e0c5695e904fa74e861aeb1f0665c60dfcb4a26e926d33489 | Triage

Submit
Reports

Overview

overview

Static

static

03072c0a73...89.exe

windows7-x64

03072c0a73...89.exe

windows10-2004-x64

Sharing

General

Target

03072c0a735a363e0c5695e904fa74e861aeb1f0665c60dfcb4a26e926d33489
Size

990KB
Sample

241112-xvl6xaxrax
MD5

d487aab9ec15cdc251708f7456debf90
SHA1

fb14fe66d2dee9f82781816a6b93b7e7d3db190f
SHA256

03072c0a735a363e0c5695e904fa74e861aeb1f0665c60dfcb4a26e926d33489
SHA512

19868456b0b8b0f43273943437ff6393334e0163cd5c4912dcc2e12f58c083e5c6bed6c39957031a44596a6d18709d1b97ab87054657ab0e44119728f717dab1
SSDEEP

24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxcd:bJ5gEKNikf3hBfUiWxcd

Score

10^/10

ammyyadmin discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

03072c0a735a363e0c5695e904fa74e861aeb1f0665c60dfcb4a26e926d33489.exe

Resource

win7-20241010-en

ammyyadmin discovery rat

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

03072c0a735a363e0c5695e904fa74e861aeb1f0665c60dfcb4a26e926d33489.exe

Resource

win10v2004-20241007-en

ammyyadmin discovery rat

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  03072c0a735a363e0c5695e904fa74e861aeb1f0665c60dfcb4a26e926d33489
- Size
  
  990KB
- MD5
  
  d487aab9ec15cdc251708f7456debf90
- SHA1
  
  fb14fe66d2dee9f82781816a6b93b7e7d3db190f
- SHA256
  
  03072c0a735a363e0c5695e904fa74e861aeb1f0665c60dfcb4a26e926d33489
- SHA512
  
  19868456b0b8b0f43273943437ff6393334e0163cd5c4912dcc2e12f58c083e5c6bed6c39957031a44596a6d18709d1b97ab87054657ab0e44119728f717dab1
- SSDEEP
  
  24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxcd:bJ5gEKNikf3hBfUiWxcd
Score

10^/10

ammyyadmin discovery rat
- Ammyy Admin
  Remote admin tool with various capabilities.
  rat ammyyadmin
- AmmyyAdmin payload
- Ammyyadmin family
  ammyyadmin
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ammyyadmindiscoveryrat

behavioral2

ammyyadmindiscoveryrat

© 2018-2025

Terms | Privacy