Overview

overview

10

Static

static

9dce97ef8b...6f.exe

windows7_x64

10

9dce97ef8b...6f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9dce97ef8b211295b3b34a16f101cd43265109acfb48b76f7f51446235f0a96f

  • Size

    540KB

  • Sample

    210513-5d1f8t7q5j

  • MD5

    23d1aa9b71a08e1fe727c5c66b214022

  • SHA1

    4ba3857925a3b24349120f7d0794f519ecd96d9a

  • SHA256

    9dce97ef8b211295b3b34a16f101cd43265109acfb48b76f7f51446235f0a96f

  • SHA512

    7213ef953dc7d1789eeef57cdbdd9d17ff7a96c8cbdf0015c3cae51829ad9051d2a317aade659c6259cc596704510b9779a92db8de09d79c829948c4af94d540

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      9dce97ef8b211295b3b34a16f101cd43265109acfb48b76f7f51446235f0a96f

    • Size

      540KB

    • MD5

      23d1aa9b71a08e1fe727c5c66b214022

    • SHA1

      4ba3857925a3b24349120f7d0794f519ecd96d9a

    • SHA256

      9dce97ef8b211295b3b34a16f101cd43265109acfb48b76f7f51446235f0a96f

    • SHA512

      7213ef953dc7d1789eeef57cdbdd9d17ff7a96c8cbdf0015c3cae51829ad9051d2a317aade659c6259cc596704510b9779a92db8de09d79c829948c4af94d540

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks