Overview

overview

10

Static

static

efba6d1704...23.dll

windows7_x64

10

efba6d1704...23.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efba6d1704192416ce8e9824cfad5f651a13f4df1b4fc15b4a313d2f0c946f23

  • Size

    276KB

  • Sample

    210504-82w4jrlbxx

  • MD5

    2460d18dad3bf654f543d9c160674bec

  • SHA1

    c8d60261f409255ea25db425e75b7fd49b2f11aa

  • SHA256

    efba6d1704192416ce8e9824cfad5f651a13f4df1b4fc15b4a313d2f0c946f23

  • SHA512

    ada9db3b9ec55783c6dabac8d0142d0e6ba28e825fa69700edffeca90394d85351d024ca83e844be975245dd619b95fe16dfb395705fa3b682c78d62a706f9db

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      efba6d1704192416ce8e9824cfad5f651a13f4df1b4fc15b4a313d2f0c946f23

    • Size

      276KB

    • MD5

      2460d18dad3bf654f543d9c160674bec

    • SHA1

      c8d60261f409255ea25db425e75b7fd49b2f11aa

    • SHA256

      efba6d1704192416ce8e9824cfad5f651a13f4df1b4fc15b4a313d2f0c946f23

    • SHA512

      ada9db3b9ec55783c6dabac8d0142d0e6ba28e825fa69700edffeca90394d85351d024ca83e844be975245dd619b95fe16dfb395705fa3b682c78d62a706f9db

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks