Overview

overview

10

Static

static

be294b6fac...d2.dll

windows7_x64

10

be294b6fac...d2.dll

windows10_x64

8

Resubmissions

18/03/2021, 22:02

210318-wg14eesjje10

13/11/2020, 10:22

201113-ycmfkdqrdn10

Sharing

Copy URL Twitter E-mail

General

  • Target
    be294b6faca17e762d1722ea1e447a3ad3a57b4c110cfe8ff515e3d2047c5ad2
  • Size 136KB
  • Sample201113-ycmfkdqrdn
  • SHA256 be294b6faca17e762d1722ea1e447a3ad3a57b4c110cfe8ff515e3d2047c5ad2
  • MD5 SHA1 SHA512
Score
10/10
ursnif_rm3bankertrojan

Malware Config

Targets

    • Target
      be294b6faca17e762d1722ea1e447a3ad3a57b4c110cfe8ff515e3d2047c5ad2
    • Size 136KB
    • SHA256 be294b6faca17e762d1722ea1e447a3ad3a57b4c110cfe8ff515e3d2047c5ad2
    • MD5 SHA1 SHA512
    Score
    10/10
    ursnif_rm3bankertrojan

    • Ursnif RM3

      A heavily modified version of Ursnif discovered in the wild.

      bankertrojanursnif_rm3

    • Blacklisted process makes network request

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks