ammyyadmin | a1452639a095592c1622cfea09b9f48a4ebd45fd4af19924266b640d260299c4 | Triage

Submit
Reports

Overview

overview

Static

static

a1452639a0...c4.exe

windows7-x64

a1452639a0...c4.exe

windows10-2004-x64

Sharing

General

Target

a1452639a095592c1622cfea09b9f48a4ebd45fd4af19924266b640d260299c4
Size

986KB
Sample

241113-bhsbhatgnd
MD5

67c2325980703c050f18b9e4f02803fd
SHA1

a3053169ff43b192f05baad46499eed0e420c73c
SHA256

a1452639a095592c1622cfea09b9f48a4ebd45fd4af19924266b640d260299c4
SHA512

d80ecf5a36234e3f53b6f4ad7782c2a1b5baa1deab923e1787c454222aeae181d1e79bc89aa4fbad247bda569167e5d25487ea202019f41ea36e03397b9f667d
SSDEEP

24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxS:bJ5gEKNikf3hBfUiWxS

Score

10^/10

ammyyadmin discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

a1452639a095592c1622cfea09b9f48a4ebd45fd4af19924266b640d260299c4.exe

Resource

win7-20240903-en

ammyyadmin discovery rat

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

a1452639a095592c1622cfea09b9f48a4ebd45fd4af19924266b640d260299c4.exe

Resource

win10v2004-20241007-en

ammyyadmin discovery rat

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  a1452639a095592c1622cfea09b9f48a4ebd45fd4af19924266b640d260299c4
- Size
  
  986KB
- MD5
  
  67c2325980703c050f18b9e4f02803fd
- SHA1
  
  a3053169ff43b192f05baad46499eed0e420c73c
- SHA256
  
  a1452639a095592c1622cfea09b9f48a4ebd45fd4af19924266b640d260299c4
- SHA512
  
  d80ecf5a36234e3f53b6f4ad7782c2a1b5baa1deab923e1787c454222aeae181d1e79bc89aa4fbad247bda569167e5d25487ea202019f41ea36e03397b9f667d
- SSDEEP
  
  24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxS:bJ5gEKNikf3hBfUiWxS
Score

10^/10

ammyyadmin discovery rat
- Ammyy Admin
  Remote admin tool with various capabilities.
  rat ammyyadmin
- AmmyyAdmin payload
- Ammyyadmin family
  ammyyadmin
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ammyyadmindiscoveryrat

behavioral2

ammyyadmindiscoveryrat

© 2018-2024

Terms | Privacy