General
- Target sub_74656a65e965.bin
- Size 748KB
- Sample260524-cb7chsas7t
- SHA256 74656a65e96590a2734384bf89cb9ff677dcedff5f6e937d350b9f46ec52cd0a
- MD5 3b4ed97de29af222837095a7c411b8a1
- SHA1 ea003f86db4cf74e4348e7e43e4732597e04db96
- SHA512 2e1d1365163b08310e5112063be8ebd0ec1aa8c20a0872eef021978d6eb04a7b3d50af0a6472c246443585e665df2daa1e1a44a166780a8bf01de098a016e572
- SSDEEP 12288:3VFUEuNmwvGrw9i0aTGRGicBckyyFRtWY1i3FTsvOVVUg0:XUEUUw9RaTNicBrPFRtJ1iVTsCZ0
- TLSH T109F4AE1279C2847EC572067099966BB5EAF6FE590E768D036388FE3C5A74D00DA2373C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
sub_74656a65e965.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
sub_74656a65e965.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target sub_74656a65e965.bin
- Size 748KB
- SHA256 74656a65e96590a2734384bf89cb9ff677dcedff5f6e937d350b9f46ec52cd0a
- MD5 3b4ed97de29af222837095a7c411b8a1
- SHA1 ea003f86db4cf74e4348e7e43e4732597e04db96
- SHA512 2e1d1365163b08310e5112063be8ebd0ec1aa8c20a0872eef021978d6eb04a7b3d50af0a6472c246443585e665df2daa1e1a44a166780a8bf01de098a016e572
- SSDEEP 12288:3VFUEuNmwvGrw9i0aTGRGicBckyyFRtWY1i3FTsvOVVUg0:XUEUUw9RaTNicBrPFRtJ1iVTsCZ0
- TLSH T109F4AE1279C2847EC572067099966BB5EAF6FE590E768D036388FE3C5A74D00DA2373C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: FlawedAmmyy RAT
Remote-access trojan based on leaked code for the Ammyy remote admin software.
-
Drops file in System32 directory