Overview

overview

10

Static

static

91f57192a0...e0.dll

windows7_x64

10

91f57192a0...e0.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91f57192a07e66edf513689e5fbf5d79fd6f686095feefd12a346e13dd0015e0

  • Size

    400KB

  • Sample

    210513-mgh5b1tdne

  • MD5

    3d821ecc690e9c269dbf03c9a9e7e98e

  • SHA1

    341cebdf3b13da3fad64a2f7823c7dad90b351d1

  • SHA256

    91f57192a07e66edf513689e5fbf5d79fd6f686095feefd12a346e13dd0015e0

  • SHA512

    1c1d367700cade0858913e308b08b1759412e0bdab34e03e37f0c372633d432a5f00854cfbd49761ce5c4c3a28c442fa83e360a109801fc070799c1522e85b7a

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      91f57192a07e66edf513689e5fbf5d79fd6f686095feefd12a346e13dd0015e0

    • Size

      400KB

    • MD5

      3d821ecc690e9c269dbf03c9a9e7e98e

    • SHA1

      341cebdf3b13da3fad64a2f7823c7dad90b351d1

    • SHA256

      91f57192a07e66edf513689e5fbf5d79fd6f686095feefd12a346e13dd0015e0

    • SHA512

      1c1d367700cade0858913e308b08b1759412e0bdab34e03e37f0c372633d432a5f00854cfbd49761ce5c4c3a28c442fa83e360a109801fc070799c1522e85b7a

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks