Overview

overview

10

Static

static

99919dfafd...83.exe

windows7_x64

10

99919dfafd...83.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99919dfafd59775c4a8963a56064866c5d6cd9e13d7bcdd5d02c067b9b3dfa83

  • Size

    239KB

  • Sample

    210509-8jczx85kqn

  • MD5

    04619d1454626bb64be70fae41c06240

  • SHA1

    192960125a50cb9e947619d3e8410a4b49502f20

  • SHA256

    99919dfafd59775c4a8963a56064866c5d6cd9e13d7bcdd5d02c067b9b3dfa83

  • SHA512

    71936a552e27d6bf93f4eaff8f5a9497d3e6e72372291a438c640abcda41bd7d9add13f18f36dbee5732ef511f7e810b26aec2c66c66c29982102af87e571dc9

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      99919dfafd59775c4a8963a56064866c5d6cd9e13d7bcdd5d02c067b9b3dfa83

    • Size

      239KB

    • MD5

      04619d1454626bb64be70fae41c06240

    • SHA1

      192960125a50cb9e947619d3e8410a4b49502f20

    • SHA256

      99919dfafd59775c4a8963a56064866c5d6cd9e13d7bcdd5d02c067b9b3dfa83

    • SHA512

      71936a552e27d6bf93f4eaff8f5a9497d3e6e72372291a438c640abcda41bd7d9add13f18f36dbee5732ef511f7e810b26aec2c66c66c29982102af87e571dc9

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks