2026-02-01_066786cc1ece75a81028bd7c07e1c5e9_elex_hacktools_wannacry
Classification: Malicious
2026-02-01_066786cc1ece75a81028bd7c07e1c5e9_elex_hacktools_wannacry is a malicious file sample. Linked to Flawedammyy malware.
Detection summary
- 50 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: FLAWEDAMMYY (S0381)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Flawedammyy | Triage | 2026-02-01 13:03:41 | 2026-02-01 13:03:41 | malicious-activity | S0381 FlawedAmmyy |
Tags
ammyyadmin flawedammyy discovery trojanSample information
- Filenames
- 2026-02-01_066786cc1ece75a81028bd7c07e1c5e9_elex_hacktools_wannacry
- MD5
066786cc1ece75a81028bd7c07e1c5e9- SHA-1
ea073c09751d2e19390ea1e13b4b4c217a2e9c02- SHA-256
0ad190ee5aaa4ead0216a35fce3616cc5514a9a0d8f5d9a8cb8a878862381fa2- SHA-512
54b990a4e8437e59808e18d24865b6b3cb5d95bf83274b9cc88df3fa3da480c9e85648e86ef2cb69d30fa01ae919a531f300a86273b6392d5ec3cd329f711f61- First indexed
- 2026-02-01 13:03:41
- Last updated
- 2026-02-01 13:03:41
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Application.RemoteAdmin.RIQ |
| APEX | Malicious |
| AVG | FileRepMalware [Trj] |
| AhnLab-V3 | Unwanted/Win32.RemoteAdmin.R218311 |
| Antiy-AVL | RiskWare[RemoteAdmin]/Win32.Ammyy.aqm |
| Arcabit | Application.RemoteAdmin.RIQ |
| Avast | FileRepMalware [Trj] |
| BitDefender | Application.RemoteAdmin.RIQ |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.GenericPMF.S181297 |
| CTX | exe.remote-access-trojan.generic |
| CrowdStrike | win/grayware_confidence_100% (D) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Program.RemoteAdmin.863 |
| ESET-NOD32 | Win32/RemoteAdmin.Ammyy.B potentially unsafe application |
| Elastic | malicious (high confidence) |
| Emsisoft | Application.RemoteAdmin.RIQ (B) |
| Fortinet | Riskware/Ammyy |
| GData | Win32.Riskware.RemoteAdmin.A |
| Detected | |
| Gridinsoft | Risk.Win32.Ammyy.ad!i |
| Ikarus | PUA.RemoteAdmin.Ammyy |
| Jiangmin | RemoteAdmin.Ammyy.eb |
| K7AntiVirus | RemoteTool ( 005ce7921 ) |
| K7GW | RemoteTool ( 005ce7921 ) |
| Kaspersky | not-a-virus:RemoteAdmin.Win32.Ammyy.aqm |
| Kingsoft | malware.kb.a.995 |
| Lionic | Riskware.Win32.Ammyy.1!c |
| Malwarebytes | PUP.Optional.RAAmmyy |
| McAfeeD | ti!0AD190EE5AAA |
| MicroWorld-eScan | Application.RemoteAdmin.RIQ |
| NANO-Antivirus | Riskware.Win32.RemoteAdmin.egaxvy |
| Paloalto | generic.ml |
| Rising | HackTool.Ammyy!1.C8BE (CLASSIC) |
| SUPERAntiSpyware | PUP.RemoteAdmin/Variant |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Suspicious PE |
| Sophos | Generic ML PUA (PUA) |
| Symantec | SMG.Heur!gen |
| Tencent | Malware.Win32.Gencirc.10bd75c6 |
| Trapmine | malicious.high.ml.score |
| TrellixENS | RemAdm-Ammyy |
| VIPRE | Application.RemoteAdmin.RIQ |
| Varist | W32/RemoteAdmin.C.gen!Eldorado |
| Webroot | W32.Ammyy.Ra |
| Xcitium | Application.Win32.RemoteAdmin.Ammyy.CA@6lncg7 |
| Yandex | Trojan.GenAsa!dTb/ZJnuUKE |
| huorong | HackTool/AmmyyAdmin.a |