Overview

overview

10

Static

static

8

bccff92b0e...34.dll

windows7_x64

10

bccff92b0e...34.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bccff92b0eb7a62fcb05ee90344ce8c1ce440943fcbcd0f638fcc02562b51d34

  • Size

    166KB

  • Sample

    210508-83pkb1dfq2

  • MD5

    902274aa78b897b0a2a22d5825937dc4

  • SHA1

    342f422b00ae3e589594fd27087910d0f3e3bde2

  • SHA256

    bccff92b0eb7a62fcb05ee90344ce8c1ce440943fcbcd0f638fcc02562b51d34

  • SHA512

    6c2ae64a1a41bf0961eb19b5e2546f789d6311f0a4ded609f82329bde315f8e54d32e1d80abbb31c5854fc9f9b4bbedf8941cc4039911067ed1a9c659252a3a3

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      bccff92b0eb7a62fcb05ee90344ce8c1ce440943fcbcd0f638fcc02562b51d34

    • Size

      166KB

    • MD5

      902274aa78b897b0a2a22d5825937dc4

    • SHA1

      342f422b00ae3e589594fd27087910d0f3e3bde2

    • SHA256

      bccff92b0eb7a62fcb05ee90344ce8c1ce440943fcbcd0f638fcc02562b51d34

    • SHA512

      6c2ae64a1a41bf0961eb19b5e2546f789d6311f0a4ded609f82329bde315f8e54d32e1d80abbb31c5854fc9f9b4bbedf8941cc4039911067ed1a9c659252a3a3

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks