Overview

overview

10

Static

static

b76b43c4f7...d5.dll

windows7_x64

10

b76b43c4f7...d5.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b76b43c4f763d18bcd94659594597bf6f1efccbe499628c9ea8a2ecb84864ed5

  • Size

    151KB

  • Sample

    210513-6zdf6nqers

  • MD5

    865ebe67e6d38a4bc23e0a6ed0bb36c9

  • SHA1

    1d490dc398cfbc72e2e55fd5d344daa8e4d87126

  • SHA256

    b76b43c4f763d18bcd94659594597bf6f1efccbe499628c9ea8a2ecb84864ed5

  • SHA512

    037a3d7cef84becc25f479b438be95c50d4b6c8e3e37f30e6219cb08efbcf8e9e4d0450b6c139b8df493f3200f3b1e4e3af5b0b055abdec416327b2e0056a825

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      b76b43c4f763d18bcd94659594597bf6f1efccbe499628c9ea8a2ecb84864ed5

    • Size

      151KB

    • MD5

      865ebe67e6d38a4bc23e0a6ed0bb36c9

    • SHA1

      1d490dc398cfbc72e2e55fd5d344daa8e4d87126

    • SHA256

      b76b43c4f763d18bcd94659594597bf6f1efccbe499628c9ea8a2ecb84864ed5

    • SHA512

      037a3d7cef84becc25f479b438be95c50d4b6c8e3e37f30e6219cb08efbcf8e9e4d0450b6c139b8df493f3200f3b1e4e3af5b0b055abdec416327b2e0056a825

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks