ammyyadmin | 08916dcbb2ac3443429f3426caaedc77a8ebc30417428266434ab108bb808c15 | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...9a.exe

windows7-x64

JaffaCakes...9a.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_53126310b9e5a75cdc27768b2e79c49a
Size

712KB
Sample

250305-wqny9svwez
MD5

53126310b9e5a75cdc27768b2e79c49a
SHA1

89d758296729da08b468e545299ec0106309f7d1
SHA256

08916dcbb2ac3443429f3426caaedc77a8ebc30417428266434ab108bb808c15
SHA512

c2bbac5900278feab83341896fad70ba8c9c648ba8a0c5f418481f57d4b641c381ccc0eed732a9d60ffb67a95b2c3478624072b19bbc9080e7f7660fad0fc1c4
SSDEEP

12288:HKHp9fDIItMm2o44sGTdBqWvwD+8ChCbW3XTjY1r1RtH8ePhAU5u0AhpZxAhegl:HorLkbDEhyW3XS1RtcePKUBATZxul

Score

10^/10

ammyyadmin flawedammyy discovery trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_53126310b9e5a75cdc27768b2e79c49a.exe

Resource

win7-20241023-en

flawedammyy discovery trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_53126310b9e5a75cdc27768b2e79c49a.exe

Resource

win10v2004-20250217-en

flawedammyy discovery trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_53126310b9e5a75cdc27768b2e79c49a
- Size
  
  712KB
- MD5
  
  53126310b9e5a75cdc27768b2e79c49a
- SHA1
  
  89d758296729da08b468e545299ec0106309f7d1
- SHA256
  
  08916dcbb2ac3443429f3426caaedc77a8ebc30417428266434ab108bb808c15
- SHA512
  
  c2bbac5900278feab83341896fad70ba8c9c648ba8a0c5f418481f57d4b641c381ccc0eed732a9d60ffb67a95b2c3478624072b19bbc9080e7f7660fad0fc1c4
- SSDEEP
  
  12288:HKHp9fDIItMm2o44sGTdBqWvwD+8ChCbW3XTjY1r1RtH8ePhAU5u0AhpZxAhegl:HorLkbDEhyW3XS1RtcePKUBATZxul
Score

10^/10

flawedammyy discovery trojan
- FlawedAmmyy RAT
  Remote-access trojan based on leaked code for the Ammyy remote admin software.
  trojan flawedammyy
- Flawedammyy family
  flawedammyy
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

flawedammyydiscoverytrojan

behavioral2

flawedammyydiscoverytrojan

© 2018-2025

Terms | Privacy