General
- Target JaffaCakes118_2eec609dc75a513b908cf5fc53ba93e8
- Size 335KB
- Sample261006-xp6cladv6s
- SHA256 b5de16f81d9b817b53134b271e4654bf990cc669c0e5cff6cd508e1a3e701ce0
- MD5 2eec609dc75a513b908cf5fc53ba93e8
- SHA1 e23a290893d1ab27815768838c43c8a594e18a0b
- SHA512 620696e479b15e2f31f92bdc0b307fa9fd4dfb95a2640ffd7d6929ee595fc92b9b86a4c527d7cea96da90e75cd26d5f56afe657b75f45b0f61d9972244df87f9
- SSDEEP 6144:0mmiijDJLbgypC6iWHyF/k6Zqdiu90np4FjNmYOl5QdHDfp4:0mmnJLbJpBokoqku90np45NmYFfp4
- TLSH T11274233F3A59ADA61FA2B639C51999E19C3CC1DB793070B2C0D02BFEA68313391551E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AA_v3.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
AA_v3.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target AA_v3.exe
- Size 751KB
- SHA256 7a836e718b70f586695d1bced9eacfb1aa1b67387b051d0536669754b391fe81
- MD5 1fc7c230d6db0d7a0da6f415da271159
- SHA1 e0bd10d83bc7b3f1eb628974a8f690ffda6e9351
- SHA512 96d64cba5bf650066e54bcb84f13aabd1992811963ae2dd3530431e86bbc3230d673545953d35767fbf85f61d86b44170d61200d1ffb4f4945268bfc3a7b1403
- SSDEEP 12288:Tc1dZibTD9uOroAgeHvCUt4RtlTc+YNKpQsNvVd1gF:Tcc/DwOrZgeHv54Rt6+YNkQsNmF
- TLSH T1EFF4AD127986807EC176057189596BB5EAF6FE680E3A8D436388FE3C8D75E01DA1373C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: FlawedAmmyy RAT
Remote-access trojan based on leaked code for the Ammyy remote admin software.
-
Drops file in System32 directory