ammyyadmin | 85e6db3894fb7651e76abb0671ef73cf79bc84d6b3822a4ea4f4383212353bc2 | Triage

Submit
Reports

Overview

overview

Static

static

85e6db3894...c2.exe

windows7-x64

85e6db3894...c2.exe

windows10-2004-x64

Sharing

General

Target

85e6db3894fb7651e76abb0671ef73cf79bc84d6b3822a4ea4f4383212353bc2
Size

976KB
Sample

241227-3ya6psskgs
MD5

ca098378b9bccd0c6c974d4007f10e92
SHA1

b34e7e690fc79af173acf4cb4e2ad7b2deedd28a
SHA256

85e6db3894fb7651e76abb0671ef73cf79bc84d6b3822a4ea4f4383212353bc2
SHA512

ceb1336e40eed4fe458d24472723f932eac82a7c5e5d9809e9756e284180c5712e3717d0fe0637f72526c0cb7eacb70597ee34392a3a05a6fa9b8e32e6d7a27c
SSDEEP

24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxe:bJ5gEKNikf3hBfUiWxe

Score

10^/10

ammyyadmin discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

85e6db3894fb7651e76abb0671ef73cf79bc84d6b3822a4ea4f4383212353bc2.exe

Resource

win7-20240729-en

ammyyadmin discovery rat

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

85e6db3894fb7651e76abb0671ef73cf79bc84d6b3822a4ea4f4383212353bc2.exe

Resource

win10v2004-20241007-en

ammyyadmin discovery rat

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  85e6db3894fb7651e76abb0671ef73cf79bc84d6b3822a4ea4f4383212353bc2
- Size
  
  976KB
- MD5
  
  ca098378b9bccd0c6c974d4007f10e92
- SHA1
  
  b34e7e690fc79af173acf4cb4e2ad7b2deedd28a
- SHA256
  
  85e6db3894fb7651e76abb0671ef73cf79bc84d6b3822a4ea4f4383212353bc2
- SHA512
  
  ceb1336e40eed4fe458d24472723f932eac82a7c5e5d9809e9756e284180c5712e3717d0fe0637f72526c0cb7eacb70597ee34392a3a05a6fa9b8e32e6d7a27c
- SSDEEP
  
  24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxe:bJ5gEKNikf3hBfUiWxe
Score

10^/10

ammyyadmin discovery rat
- Ammyy Admin
  Remote admin tool with various capabilities.
  rat ammyyadmin
- AmmyyAdmin payload
- Ammyyadmin family
  ammyyadmin
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ammyyadmindiscoveryrat

behavioral2

ammyyadmindiscoveryrat

© 2018-2025

Terms | Privacy