ammyyadmin | c9470886cc3627f16352061cffc6ce8f1f7bc5b546b7c7ae715de5a33ed7450c | Triage

Submit
Reports

Overview

overview

Static

static

c9470886cc...cN.exe

windows7-x64

c9470886cc...cN.exe

windows10-2004-x64

Sharing

General

Target

c9470886cc3627f16352061cffc6ce8f1f7bc5b546b7c7ae715de5a33ed7450cN.exe
Size

975KB
Sample

250111-afqt8atrbv
MD5

0288f9c0888497631d0d7631252d92e0
SHA1

b5d99af3de69fca8cef10339cf5e3e4f3ee1269f
SHA256

c9470886cc3627f16352061cffc6ce8f1f7bc5b546b7c7ae715de5a33ed7450c
SHA512

30383cf1bc795f7335be6b301a5c58c60de36f6d1822e2ea152b5a2198093d7d7dd2f38684db1de30db90fad6ed742b8f117b2564f8e46df89849666197285b8
SSDEEP

24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxN:bJ5gEKNikf3hBfUiWxN

Score

10^/10

ammyyadmin discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

c9470886cc3627f16352061cffc6ce8f1f7bc5b546b7c7ae715de5a33ed7450cN.exe

Resource

win7-20241010-en

ammyyadmin discovery rat

windows7-x64

8 signatures

120 seconds

Behavioral task

behavioral2

Sample

c9470886cc3627f16352061cffc6ce8f1f7bc5b546b7c7ae715de5a33ed7450cN.exe

Resource

win10v2004-20241007-en

ammyyadmin discovery rat

windows10-2004-x64

8 signatures

120 seconds

Malware Config

Targets

- Target
  
  c9470886cc3627f16352061cffc6ce8f1f7bc5b546b7c7ae715de5a33ed7450cN.exe
- Size
  
  975KB
- MD5
  
  0288f9c0888497631d0d7631252d92e0
- SHA1
  
  b5d99af3de69fca8cef10339cf5e3e4f3ee1269f
- SHA256
  
  c9470886cc3627f16352061cffc6ce8f1f7bc5b546b7c7ae715de5a33ed7450c
- SHA512
  
  30383cf1bc795f7335be6b301a5c58c60de36f6d1822e2ea152b5a2198093d7d7dd2f38684db1de30db90fad6ed742b8f117b2564f8e46df89849666197285b8
- SSDEEP
  
  24576:eMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxN:bJ5gEKNikf3hBfUiWxN
Score

10^/10

ammyyadmin discovery rat
- Ammyy Admin
  Remote admin tool with various capabilities.
  rat ammyyadmin
- AmmyyAdmin payload
- Ammyyadmin family
  ammyyadmin
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ammyyadmindiscoveryrat

behavioral2

ammyyadmindiscoveryrat

© 2018-2025

Terms | Privacy