Overview

overview

10

Static

static

1cb7518b97...f2.dll

windows7_x64

10

1cb7518b97...f2.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cb7518b9767649f65362006788dc4b42561b266ab50f99d5c21ae43522af3f2

  • Size

    204KB

  • Sample

    210513-bjqfnrmjn2

  • MD5

    3cef9d9d028b182e243714330efc65cc

  • SHA1

    4946ffc4e2296fced1f73e7ea677e3db031fb820

  • SHA256

    1cb7518b9767649f65362006788dc4b42561b266ab50f99d5c21ae43522af3f2

  • SHA512

    89c0360f299da550e61b8535a7803b2d112c01a9118b83466b48b9d0992d21c59e01386e2b497d34e6f17cad0a4daf6e52d113bd1861c81ce923cf81ca2cd46b

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      1cb7518b9767649f65362006788dc4b42561b266ab50f99d5c21ae43522af3f2

    • Size

      204KB

    • MD5

      3cef9d9d028b182e243714330efc65cc

    • SHA1

      4946ffc4e2296fced1f73e7ea677e3db031fb820

    • SHA256

      1cb7518b9767649f65362006788dc4b42561b266ab50f99d5c21ae43522af3f2

    • SHA512

      89c0360f299da550e61b8535a7803b2d112c01a9118b83466b48b9d0992d21c59e01386e2b497d34e6f17cad0a4daf6e52d113bd1861c81ce923cf81ca2cd46b

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks