Overview

overview

10

Static

static

29233737fd...3b.dll

windows7_x64

10

29233737fd...3b.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29233737fd55f65b571c76132b43133c71ce5fede9825a03d2e2928fdb399a3b

  • Size

    536KB

  • Sample

    210513-hy4c9aexq6

  • MD5

    3e096103e9228d6c68d53a66d5744952

  • SHA1

    655f73c6d6d61d5e3f7f135b6dc4ddf756a20385

  • SHA256

    29233737fd55f65b571c76132b43133c71ce5fede9825a03d2e2928fdb399a3b

  • SHA512

    22b35fdb2edd2c8c26adea0a2c53a5ee668f813eda76984f6f61ed4832b11623ea2e27d2dbf11e225dc9d2cb74cefd616aedcc4fe1b96e64232381932d7e9993

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      29233737fd55f65b571c76132b43133c71ce5fede9825a03d2e2928fdb399a3b

    • Size

      536KB

    • MD5

      3e096103e9228d6c68d53a66d5744952

    • SHA1

      655f73c6d6d61d5e3f7f135b6dc4ddf756a20385

    • SHA256

      29233737fd55f65b571c76132b43133c71ce5fede9825a03d2e2928fdb399a3b

    • SHA512

      22b35fdb2edd2c8c26adea0a2c53a5ee668f813eda76984f6f61ed4832b11623ea2e27d2dbf11e225dc9d2cb74cefd616aedcc4fe1b96e64232381932d7e9993

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks