Overview

overview

10

Static

static

9a16794747...b4.dll

windows7_x64

10

9a16794747...b4.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a1679474786b258c4dc0e4e7429dda5e71e1faa8529f5037e19a169b88b93b4

  • Size

    300KB

  • Sample

    210504-9ll7pln5xx

  • MD5

    bf274ca882dd1d5d66ba32a9595a3d3a

  • SHA1

    a76abf9ba17777be8d9d847c7a7701a3fc3cf23b

  • SHA256

    9a1679474786b258c4dc0e4e7429dda5e71e1faa8529f5037e19a169b88b93b4

  • SHA512

    cd4e0e4bafbf488980f41a9c39effd3010dfc2b9b34502863403f47de7fefac04a616f0e7be8d69dee90adebf3d5e955827845eb19a6c609b3c2cca568fa6b10

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      9a1679474786b258c4dc0e4e7429dda5e71e1faa8529f5037e19a169b88b93b4

    • Size

      300KB

    • MD5

      bf274ca882dd1d5d66ba32a9595a3d3a

    • SHA1

      a76abf9ba17777be8d9d847c7a7701a3fc3cf23b

    • SHA256

      9a1679474786b258c4dc0e4e7429dda5e71e1faa8529f5037e19a169b88b93b4

    • SHA512

      cd4e0e4bafbf488980f41a9c39effd3010dfc2b9b34502863403f47de7fefac04a616f0e7be8d69dee90adebf3d5e955827845eb19a6c609b3c2cca568fa6b10

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks