Overview

overview

10

Static

static

a3433134a4...27.dll

windows7_x64

10

a3433134a4...27.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3433134a45996c0aef63ec94048b16385b1bc08ef34336bacb6cceaf67abc27

  • Size

    276KB

  • Sample

    210509-r3lnhkhmtn

  • MD5

    fcb49dcb867f70cedefa4d5713460e0c

  • SHA1

    75b3377115c2474392691e5e05f9b64e87e37565

  • SHA256

    a3433134a45996c0aef63ec94048b16385b1bc08ef34336bacb6cceaf67abc27

  • SHA512

    9362be7bc4a49b4e4663b332dc01382ffe7f5cace6d29e24c1edcd4a2bf81854ef4dd4a467f2e0f127cd3dd519e2f2276f884fa182d5a307836fc137f94c3f51

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      a3433134a45996c0aef63ec94048b16385b1bc08ef34336bacb6cceaf67abc27

    • Size

      276KB

    • MD5

      fcb49dcb867f70cedefa4d5713460e0c

    • SHA1

      75b3377115c2474392691e5e05f9b64e87e37565

    • SHA256

      a3433134a45996c0aef63ec94048b16385b1bc08ef34336bacb6cceaf67abc27

    • SHA512

      9362be7bc4a49b4e4663b332dc01382ffe7f5cace6d29e24c1edcd4a2bf81854ef4dd4a467f2e0f127cd3dd519e2f2276f884fa182d5a307836fc137f94c3f51

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks