Overview

overview

10

Static

static

7f7ac3e78f...78.dll

windows7_x64

10

7f7ac3e78f...78.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f7ac3e78f5089d2cff043f8cda72b817549fd013d1160331854646f9a8d1578

  • Size

    3.2MB

  • Sample

    210508-8zhzvcvq66

  • MD5

    d3ca164992d9646c29691f6112b556d7

  • SHA1

    ea763e2a41580d48bdf11e03e21ba82dd7a7ffc3

  • SHA256

    7f7ac3e78f5089d2cff043f8cda72b817549fd013d1160331854646f9a8d1578

  • SHA512

    767d353abe254de636d2bab76ba25938fde2a897c651afefe5b39be25da736fb9f3826475aeb2d131f7af2d7a6db398b565d294559ec67d6dada92fb68a8eb8e

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      7f7ac3e78f5089d2cff043f8cda72b817549fd013d1160331854646f9a8d1578

    • Size

      3.2MB

    • MD5

      d3ca164992d9646c29691f6112b556d7

    • SHA1

      ea763e2a41580d48bdf11e03e21ba82dd7a7ffc3

    • SHA256

      7f7ac3e78f5089d2cff043f8cda72b817549fd013d1160331854646f9a8d1578

    • SHA512

      767d353abe254de636d2bab76ba25938fde2a897c651afefe5b39be25da736fb9f3826475aeb2d131f7af2d7a6db398b565d294559ec67d6dada92fb68a8eb8e

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks