Overview

overview

10

Static

static

7f30a68aa6...a9.dll

windows7_x64

10

7f30a68aa6...a9.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f30a68aa6086df1743a71207b802bb4726c6df553ea685eddfb182f19bfa6a9

  • Size

    99KB

  • Sample

    210509-6atzcdnycs

  • MD5

    cd993f17575cf57ea15d5a1fa7427327

  • SHA1

    c32aca030e91d9c55ceec93c5f29684629e1b47d

  • SHA256

    7f30a68aa6086df1743a71207b802bb4726c6df553ea685eddfb182f19bfa6a9

  • SHA512

    7a118460c11b6eaa36992ef015b2d21780e71a85532f2a575720706e8c1c86385d2a610d57e0d209969f1d0073ab28c6ac9a417261db779db21b07e998eed76b

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      7f30a68aa6086df1743a71207b802bb4726c6df553ea685eddfb182f19bfa6a9

    • Size

      99KB

    • MD5

      cd993f17575cf57ea15d5a1fa7427327

    • SHA1

      c32aca030e91d9c55ceec93c5f29684629e1b47d

    • SHA256

      7f30a68aa6086df1743a71207b802bb4726c6df553ea685eddfb182f19bfa6a9

    • SHA512

      7a118460c11b6eaa36992ef015b2d21780e71a85532f2a575720706e8c1c86385d2a610d57e0d209969f1d0073ab28c6ac9a417261db779db21b07e998eed76b

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks