General

  • Target

    budha.exe

  • Size

    976KB

  • MD5

    6b17dc41af237a907601c74f89877c49

  • SHA1

    4c711e565bdff797cb75e795a75b8c6a41df22a7

  • SHA256

    be9431058a7e773c7012df0a7c24653932d0ea1eac0daa9a7b8e4192dfc45d3e

  • SHA512

    31ecf869475d35ba6836d74d837ef63fa9b32fe6675dff068d03187007735437575b3ba8af083e8eb322d27e580d9c9d16f510b1d4936de5e1fe8231956f6fef

  • SSDEEP

    24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxp:bJ5gEKNikf3hBfUiWxp

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • budha.exe
    .exe windows:5 windows x86 arch:x86

    39b2903b7498188e4955572bbeb0f3fe


    Headers

    Imports

    Sections