ursnif_rm3 | 94bb5ce324e3dbf3b2f19b85d33b77b376539ef51dce95443803c9036ffb2be3 | Triage

Sharing

General

Target

94bb5ce324e3dbf3b2f19b85d33b77b376539ef51dce95443803c9036ffb2be3
Size

1.4MB
Sample

201027-vbs5h8majj
MD5

cf960a758eaedcd2b6e110a3ab359d9e
SHA1

54bd36675e88cc21dc125942c1474625a86cd83f
SHA256

94bb5ce324e3dbf3b2f19b85d33b77b376539ef51dce95443803c9036ffb2be3
SHA512

06277298a92a283f21e8c2e8b095723d84ee758de86c0c3684ee0316d2b3f5c13dcf7263f7b7d9c53387ebe9d32c2c056cd8eebc43124d9a45dcc9df116b7086

Score

10^/10

ursnif_rm3 banker trojan

Malware Config

Targets

- Target
  
  94bb5ce324e3dbf3b2f19b85d33b77b376539ef51dce95443803c9036ffb2be3
- Size
  
  1.4MB
- MD5
  
  cf960a758eaedcd2b6e110a3ab359d9e
- SHA1
  
  54bd36675e88cc21dc125942c1474625a86cd83f
- SHA256
  
  94bb5ce324e3dbf3b2f19b85d33b77b376539ef51dce95443803c9036ffb2be3
- SHA512
  
  06277298a92a283f21e8c2e8b095723d84ee758de86c0c3684ee0316d2b3f5c13dcf7263f7b7d9c53387ebe9d32c2c056cd8eebc43124d9a45dcc9df116b7086
Score

10^/10

banker trojan ursnif_rm3
- Ursnif RM3
  A heavily modified version of Ursnif discovered in the wild.
  banker trojan ursnif_rm3
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

bankertrojanursnif_rm3

behavioral2