General

  • Target

    ac9ca1ada708e146492076eb2051c874917f65271506caa57e7901e9c46a4609

  • Size

    976KB

  • MD5

    679425d4dad77902cf06eec729aef764

  • SHA1

    26d2a0f339f508cf508e86c817f0aca53f61c510

  • SHA256

    ac9ca1ada708e146492076eb2051c874917f65271506caa57e7901e9c46a4609

  • SHA512

    74344889484c0e2867278a352e36b09cde5de8d984ddf67ca7779072942e3225d656395489b892b7137baaf90f3d59925852d8b34e6a5ed116806babdd4ea609

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxq:7J5gEKNikf3hBfUiWxq

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac9ca1ada708e146492076eb2051c874917f65271506caa57e7901e9c46a4609
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections