Overview

overview

10

Static

static

ef0276e966...b7.dll

windows7_x64

10

ef0276e966...b7.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef0276e966f52b85d0d32ff0401154060516f40b51b62b31875f877177355fb7

  • Size

    99KB

  • Sample

    210511-mt3d42t7ce

  • MD5

    92e5c67c8994aa5dc9e2d68d2ea2075a

  • SHA1

    a38e03ba5f4a6a4be3103426cc0374d58bdbc6e6

  • SHA256

    ef0276e966f52b85d0d32ff0401154060516f40b51b62b31875f877177355fb7

  • SHA512

    2601e4349ee2764218183f94af759b5cbfd092140d45e5694c3a027ff0af91ba4ba605fc1cacc9ae1e38a5dc8cda847ca239776a3b329bd7c83d49e397ecd76b

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      ef0276e966f52b85d0d32ff0401154060516f40b51b62b31875f877177355fb7

    • Size

      99KB

    • MD5

      92e5c67c8994aa5dc9e2d68d2ea2075a

    • SHA1

      a38e03ba5f4a6a4be3103426cc0374d58bdbc6e6

    • SHA256

      ef0276e966f52b85d0d32ff0401154060516f40b51b62b31875f877177355fb7

    • SHA512

      2601e4349ee2764218183f94af759b5cbfd092140d45e5694c3a027ff0af91ba4ba605fc1cacc9ae1e38a5dc8cda847ca239776a3b329bd7c83d49e397ecd76b

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks