ursnif_rm3 | 8f6ee0292d691bd26c1faf3c18ab30956f00a1cdc4e93a26958a559d96b400c0 | Triage

Resubmissions

09-03-2021 16:06

210309-kxbe8wzgge 10

04-03-2020 00:31

200304-v9yphrchmj 10

Sharing

General

Target

6516805C322B33C1017F60314548D9A6
Size

583KB
Sample

200304-v9yphrchmj
MD5

6516805c322b33c1017f60314548d9a6
SHA1

bf46387cc42242434ba8aa788974a3f851e12e85
SHA256

8f6ee0292d691bd26c1faf3c18ab30956f00a1cdc4e93a26958a559d96b400c0
SHA512

c81c4c963bced891449458ea0936dab5e9eea904e78ef2fd3fcbd43aae49cb60c5343c0bc1756fa6f5efdd312dc2dc6fd0d698246cb56743435260796f74432c

Score

10^/10

ursnif_rm3 banker trojan

Malware Config

Targets

- Target
  
  6516805C322B33C1017F60314548D9A6
- Size
  
  583KB
- MD5
  
  6516805c322b33c1017f60314548d9a6
- SHA1
  
  bf46387cc42242434ba8aa788974a3f851e12e85
- SHA256
  
  8f6ee0292d691bd26c1faf3c18ab30956f00a1cdc4e93a26958a559d96b400c0
- SHA512
  
  c81c4c963bced891449458ea0936dab5e9eea904e78ef2fd3fcbd43aae49cb60c5343c0bc1756fa6f5efdd312dc2dc6fd0d698246cb56743435260796f74432c
Score

10^/10

banker trojan ursnif_rm3
- Ursnif RM3
  A heavily modified version of Ursnif discovered in the wild.
  banker trojan ursnif_rm3
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojanursnif_rm3

behavioral2